@mastra/code-sdk 0.2.0-alpha.4 → 0.2.0-alpha.8

package/dist/providers/amazon-bedrock-gateway.d.ts

@@ -1,5 +1,11 @@
+import { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';
 import { MastraModelGateway } from '@mastra/core/llm';
 import type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';
+type BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;
+type BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];
+export declare function supportsBedrockPromptCaching(modelId: string): boolean;
+export declare function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt;
+export declare function withBedrockCache(model: BedrockModel): BedrockModel;
 export declare const AMAZON_BEDROCK_GATEWAY_ID = "amazon-bedrock";
 /**
  * Whether AWS credentials look available for Bedrock.
@@ -37,4 +43,5 @@ export declare class AmazonBedrockGateway extends MastraModelGateway {
     }): GatewayLanguageModel;
 }
 export declare function createAmazonBedrockGateway(): AmazonBedrockGateway;
+export {};
 //# sourceMappingURL=amazon-bedrock-gateway.d.ts.map

package/dist/providers/amazon-bedrock-gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"amazon-bedrock-gateway.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock-gateway.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAKpH,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAuB3C;AAyBD;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;IAC1D,QAAQ,CAAC,EAAE,oBAA6B;IACxC,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,YAAY,IAAI,OAAO;IAIjB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAiB/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAUxE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CAGzB;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAEjE"}
+{"version":3,"file":"amazon-bedrock-gateway.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock-gateway.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAIpH,KAAK,YAAY,GAAG,UAAU,CAAC,UAAU,CAAC,OAAO,mBAAmB,CAAC,CAAC,CAAC;AACvE,KAAK,aAAa,GAAG,UAAU,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;AAazE,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAErE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAsC1E;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAclE;AAED,eAAO,MAAM,yBAAyB,mBAAmB,CAAC;AAE1D;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,IAAI,OAAO,CAuB3C;AA0BD;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,kBAAkB;IAC1D,QAAQ,CAAC,EAAE,oBAA6B;IACxC,QAAQ,CAAC,IAAI,oBAAoB;IAEjC,YAAY,IAAI,OAAO;IAIjB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAiB/D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlD,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,iBAAiB,GAAG,SAAS;IAUxE,oBAAoB,CAAC,IAAI,EAAE;QACzB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACjC,SAAS,CAAC,EAAE,GAAG,CAAC;QAChB,kBAAkB,CAAC,EAAE,GAAG,CAAC;KAC1B,GAAG,oBAAoB;CAGzB;AAED,wBAAgB,0BAA0B,IAAI,oBAAoB,CAEjE"}

package/dist/providers/amazon-bedrock-gateway.js

@@ -4,6 +4,66 @@ import { createAmazonBedrock } from "@ai-sdk/amazon-bedrock";
 import { fromNodeProviderChain } from "@aws-sdk/credential-providers";
 import { MastraModelGateway } from "@mastra/core/llm";
 import { getBedrockModelCatalog } from "./amazon-bedrock.js";
+const CACHEABLE_BEDROCK_MODEL_IDS = [
+  "anthropic.claude-3-5-haiku-",
+  "anthropic.claude-3-5-sonnet-20241022-v2:0",
+  "anthropic.claude-3-7-sonnet-",
+  "anthropic.claude-fable-5",
+  "anthropic.claude-haiku-4-5-",
+  "anthropic.claude-opus-4-",
+  "anthropic.claude-sonnet-4-",
+  "anthropic.claude-sonnet-5"
+];
+function supportsBedrockPromptCaching(modelId) {
+  return CACHEABLE_BEDROCK_MODEL_IDS.some((cacheableModelId) => modelId.includes(cacheableModelId));
+}
+function addBedrockCachePoints(prompt) {
+  const result = [...prompt];
+  const markCachePoint = (message) => ({
+    ...message,
+    providerOptions: {
+      ...message.providerOptions,
+      bedrock: {
+        ...message.providerOptions?.bedrock,
+        cachePoint: { type: "default" }
+      }
+    }
+  });
+  let lastSystemIndex = -1;
+  for (let index = result.length - 1; index >= 0; index--) {
+    if (result[index].role === "system") {
+      lastSystemIndex = index;
+      break;
+    }
+  }
+  if (lastSystemIndex >= 0) {
+    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]);
+  }
+  let lastNonSystemIndex = -1;
+  for (let index = result.length - 1; index >= 0; index--) {
+    if (result[index].role !== "system") {
+      lastNonSystemIndex = index;
+      break;
+    }
+  }
+  if (lastNonSystemIndex >= 0) {
+    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]);
+  }
+  return result;
+}
+function withBedrockCache(model) {
+  return new Proxy(model, {
+    get(target, property, receiver) {
+      if (property === "doGenerate") {
+        return (options) => target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });
+      }
+      if (property === "doStream") {
+        return (options) => target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });
+      }
+      return Reflect.get(target, property, receiver);
+    }
+  });
+}
 const AMAZON_BEDROCK_GATEWAY_ID = "amazon-bedrock";
 function hasAwsCredentials() {
   if (process.env.AWS_BEARER_TOKEN_BEDROCK || process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY || process.env.AWS_SHARED_CREDENTIALS_FILE || process.env.AWS_CONFIG_FILE || process.env.AWS_PROFILE || process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI || process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI || process.env.AWS_WEB_IDENTITY_TOKEN_FILE) {
@@ -27,7 +87,8 @@ function bedrockProvider(modelId, headers) {
     credentialProvider: fromNodeProviderChain(),
     headers
   });
-  return bedrock(modelId);
+  const model = bedrock(modelId);
+  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;
 }
 class AmazonBedrockGateway extends MastraModelGateway {
   id = AMAZON_BEDROCK_GATEWAY_ID;
@@ -73,7 +134,10 @@ function createAmazonBedrockGateway() {
 export {
   AMAZON_BEDROCK_GATEWAY_ID,
   AmazonBedrockGateway,
+  addBedrockCachePoints,
   createAmazonBedrockGateway,
-  hasAwsCredentials
+  hasAwsCredentials,
+  supportsBedrockPromptCaching,
+  withBedrockCache
 };
 //# sourceMappingURL=amazon-bedrock-gateway.js.map

package/dist/providers/amazon-bedrock-gateway.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  return bedrock(modelId);\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AAEnC,SAAS,8BAA8B;AAIhC,MAAM,4BAA4B;AAWlC,SAAS,oBAA6B;AAC3C,MACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BACZ;AACA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;AAC7C,MAAI,MAAM;AACR,UAAM,SAAS,KAAK,KAAK,MAAM,MAAM;AACrC,UAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;AAClG,UAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;AAC5E,QAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GAAG;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;AACvE,QAAM,SAAS,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;AAC3E,QAAM,UAAU,oBAAoB;AAAA,IAClC;AAAA,IACA,oBAAoB,sBAAsB;AAAA,IAC1C;AAAA,EACF,CAAC;AACD,SAAO,QAAQ,OAAO;AACxB;AAUO,MAAM,6BAA6B,mBAAmB;AAAA,EAClD,KAAK;AAAA,EACL,OAAO;AAAA,EAEhB,eAAwB;AACtB,WAAO,kBAAkB;AAAA,EAC3B;AAAA,EAEA,MAAM,iBAA0D;AAC9D,UAAM,YAA4C,CAAC;AACnD,QAAI;AACF,YAAM,gBAAgB,MAAM,uBAAuB;AACnD,gBAAU,gBAAgB,IAAI;AAAA,QAC5B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc;AAAA,QACd,SAAS,KAAK;AAAA,QACd,QAAQ,cAAc,IAAI,WAAS,MAAM,EAAE;AAAA,MAC7C;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,gDAAgD,KAAK;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,SAAS,UAAsC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,UAAmC;AACjD,WAAO,kBAAkB,IAAI,yBAAyB;AAAA,EACxD;AAAA,EAEA,YAAY,UAA6D;AAIvE,QAAI,kBAAkB,GAAG;AACvB,aAAO,EAAE,QAAQ,wBAAwB,QAAQ,UAAU;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAAA,EAEA,qBAAqB,MAOI;AACvB,WAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;AAAA,EACnD;AACF;AAEO,SAAS,6BAAmD;AACjE,SAAO,IAAI,qBAAqB;AAClC;","names":[]}
+{"version":3,"sources":["../../src/providers/amazon-bedrock-gateway.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport path from 'node:path';\nimport { createAmazonBedrock } from '@ai-sdk/amazon-bedrock';\nimport { fromNodeProviderChain } from '@aws-sdk/credential-providers';\nimport { MastraModelGateway } from '@mastra/core/llm';\nimport type { GatewayAuthRequest, GatewayAuthResult, GatewayLanguageModel, ProviderConfig } from '@mastra/core/llm';\nimport { getBedrockModelCatalog } from './amazon-bedrock.js';\n\ntype ModelRequestHeaders = Record<string, string>;\ntype BedrockModel = ReturnType<ReturnType<typeof createAmazonBedrock>>;\ntype BedrockPrompt = Parameters<BedrockModel['doGenerate']>[0]['prompt'];\n\nconst CACHEABLE_BEDROCK_MODEL_IDS = [\n  'anthropic.claude-3-5-haiku-',\n  'anthropic.claude-3-5-sonnet-20241022-v2:0',\n  'anthropic.claude-3-7-sonnet-',\n  'anthropic.claude-fable-5',\n  'anthropic.claude-haiku-4-5-',\n  'anthropic.claude-opus-4-',\n  'anthropic.claude-sonnet-4-',\n  'anthropic.claude-sonnet-5',\n];\n\nexport function supportsBedrockPromptCaching(modelId: string): boolean {\n  return CACHEABLE_BEDROCK_MODEL_IDS.some(cacheableModelId => modelId.includes(cacheableModelId));\n}\n\nexport function addBedrockCachePoints(prompt: BedrockPrompt): BedrockPrompt {\n  const result = [...prompt];\n  const markCachePoint = (message: (typeof result)[number]) => ({\n    ...message,\n    providerOptions: {\n      ...message.providerOptions,\n      bedrock: {\n        ...message.providerOptions?.bedrock,\n        cachePoint: { type: 'default' },\n      },\n    },\n  });\n\n  let lastSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role === 'system') {\n      lastSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastSystemIndex >= 0) {\n    result[lastSystemIndex] = markCachePoint(result[lastSystemIndex]!);\n  }\n\n  let lastNonSystemIndex = -1;\n  for (let index = result.length - 1; index >= 0; index--) {\n    if (result[index]!.role !== 'system') {\n      lastNonSystemIndex = index;\n      break;\n    }\n  }\n\n  if (lastNonSystemIndex >= 0) {\n    result[lastNonSystemIndex] = markCachePoint(result[lastNonSystemIndex]!);\n  }\n\n  return result;\n}\n\nexport function withBedrockCache(model: BedrockModel): BedrockModel {\n  return new Proxy(model, {\n    get(target, property, receiver) {\n      if (property === 'doGenerate') {\n        return (options: Parameters<BedrockModel['doGenerate']>[0]) =>\n          target.doGenerate({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      if (property === 'doStream') {\n        return (options: Parameters<BedrockModel['doStream']>[0]) =>\n          target.doStream({ ...options, prompt: addBedrockCachePoints(options.prompt) });\n      }\n      return Reflect.get(target, property, receiver);\n    },\n  });\n}\n\nexport const AMAZON_BEDROCK_GATEWAY_ID = 'amazon-bedrock';\n\n/**\n * Whether AWS credentials look available for Bedrock.\n *\n * Amazon Bedrock authenticates with AWS SigV4 rather than a bearer API key, so\n * this only governs whether Bedrock models are offered as \"authenticated\" in the\n * picker. We look for the common signals (env vars, bearer token, a configured\n * profile, or a shared credentials/config file) rather than resolving\n * credentials here, since the auth checker must stay sync.\n */\nexport function hasAwsCredentials(): boolean {\n  if (\n    process.env.AWS_BEARER_TOKEN_BEDROCK ||\n    (process.env.AWS_ACCESS_KEY_ID && process.env.AWS_SECRET_ACCESS_KEY) ||\n    process.env.AWS_SHARED_CREDENTIALS_FILE ||\n    process.env.AWS_CONFIG_FILE ||\n    process.env.AWS_PROFILE ||\n    process.env.AWS_CONTAINER_CREDENTIALS_RELATIVE_URI ||\n    process.env.AWS_CONTAINER_CREDENTIALS_FULL_URI ||\n    process.env.AWS_WEB_IDENTITY_TOKEN_FILE\n  ) {\n    return true;\n  }\n  const home = process.env.HOME || process.env.USERPROFILE;\n  if (home) {\n    const awsDir = path.join(home, '.aws');\n    const credentialsPath = process.env.AWS_SHARED_CREDENTIALS_FILE ?? path.join(awsDir, 'credentials');\n    const configPath = process.env.AWS_CONFIG_FILE ?? path.join(awsDir, 'config');\n    if (existsSync(credentialsPath) || existsSync(configPath)) {\n      return true;\n    }\n  }\n  return false;\n}\n\n/**\n * Create an Amazon Bedrock model.\n *\n * Bedrock authenticates with AWS SigV4 rather than a bearer API key, so this\n * resolves credentials through the standard AWS provider chain\n * (`fromNodeProviderChain`): environment variables, shared `~/.aws` config and\n * SSO profiles, and container/instance roles — the same resolution order the AWS\n * CLI uses. The region falls back to `us-east-1` to match the AWS SDK default.\n *\n * When `AWS_BEARER_TOKEN_BEDROCK` is set, `@ai-sdk/amazon-bedrock` uses bearer\n * auth instead and ignores the credential provider, so we leave that path to the\n * SDK and only wire up SigV4 here.\n */\nfunction bedrockProvider(modelId: string, headers?: ModelRequestHeaders) {\n  const region = process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || 'us-east-1';\n  const bedrock = createAmazonBedrock({\n    region,\n    credentialProvider: fromNodeProviderChain(),\n    headers,\n  });\n  const model = bedrock(modelId);\n  return supportsBedrockPromptCaching(modelId) ? withBedrockCache(model) : model;\n}\n\n/**\n * Standalone Amazon Bedrock gateway.\n *\n * Bedrock is resolved directly via AWS SigV4 (not through the model router) and\n * its models are surfaced from the public models.dev catalog. It is exposed as\n * its own gateway/provider (`amazon-bedrock/...`) rather than nested under the\n * MastraCode gateway namespace.\n */\nexport class AmazonBedrockGateway extends MastraModelGateway {\n  readonly id = AMAZON_BEDROCK_GATEWAY_ID;\n  readonly name = 'Amazon Bedrock';\n\n  shouldEnable(): boolean {\n    return hasAwsCredentials();\n  }\n\n  async fetchProviders(): Promise<Record<string, ProviderConfig>> {\n    const providers: Record<string, ProviderConfig> = {};\n    try {\n      const bedrockModels = await getBedrockModelCatalog();\n      providers['amazon-bedrock'] = {\n        name: 'Amazon Bedrock',\n        apiKeyEnvVar: '',\n        apiKeyHeader: 'Authorization',\n        gateway: this.id,\n        models: bedrockModels.map(model => model.id),\n      };\n    } catch (error) {\n      console.warn('Failed to load Amazon Bedrock model catalog:', error);\n    }\n    return providers;\n  }\n\n  buildUrl(_modelId: string): string | undefined {\n    return undefined;\n  }\n\n  async getApiKey(_modelId: string): Promise<string> {\n    return hasAwsCredentials() ? 'aws-credential-chain' : '';\n  }\n\n  resolveAuth(_request: GatewayAuthRequest): GatewayAuthResult | undefined {\n    // Amazon Bedrock authenticates via the AWS credential chain rather than a\n    // stored API key, so report it as authenticated whenever AWS credentials look\n    // available. The actual SigV4 signing happens inside `bedrockProvider()`.\n    if (hasAwsCredentials()) {\n      return { apiKey: 'aws-credential-chain', source: 'gateway' };\n    }\n    return undefined;\n  }\n\n  resolveLanguageModel(args: {\n    modelId: string;\n    providerId: string;\n    apiKey: string;\n    headers?: Record<string, string>;\n    transport?: any;\n    responsesWebSocket?: any;\n  }): GatewayLanguageModel {\n    return bedrockProvider(args.modelId, args.headers) as unknown as GatewayLanguageModel;\n  }\n}\n\nexport function createAmazonBedrockGateway(): AmazonBedrockGateway {\n  return new AmazonBedrockGateway();\n}\n"],"mappings":"AAAA,SAAS,kBAAkB;AAC3B,OAAO,UAAU;AACjB,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,0BAA0B;AAEnC,SAAS,8BAA8B;AAMvC,MAAM,8BAA8B;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,SAAS,6BAA6B,SAA0B;AACrE,SAAO,4BAA4B,KAAK,sBAAoB,QAAQ,SAAS,gBAAgB,CAAC;AAChG;AAEO,SAAS,sBAAsB,QAAsC;AAC1E,QAAM,SAAS,CAAC,GAAG,MAAM;AACzB,QAAM,iBAAiB,CAAC,aAAsC;AAAA,IAC5D,GAAG;AAAA,IACH,iBAAiB;AAAA,MACf,GAAG,QAAQ;AAAA,MACX,SAAS;AAAA,QACP,GAAG,QAAQ,iBAAiB;AAAA,QAC5B,YAAY,EAAE,MAAM,UAAU;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AAEA,MAAI,kBAAkB;AACtB,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;AACvD,QAAI,OAAO,KAAK,EAAG,SAAS,UAAU;AACpC,wBAAkB;AAClB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,mBAAmB,GAAG;AACxB,WAAO,eAAe,IAAI,eAAe,OAAO,eAAe,CAAE;AAAA,EACnE;AAEA,MAAI,qBAAqB;AACzB,WAAS,QAAQ,OAAO,SAAS,GAAG,SAAS,GAAG,SAAS;AACvD,QAAI,OAAO,KAAK,EAAG,SAAS,UAAU;AACpC,2BAAqB;AACrB;AAAA,IACF;AAAA,EACF;AAEA,MAAI,sBAAsB,GAAG;AAC3B,WAAO,kBAAkB,IAAI,eAAe,OAAO,kBAAkB,CAAE;AAAA,EACzE;AAEA,SAAO;AACT;AAEO,SAAS,iBAAiB,OAAmC;AAClE,SAAO,IAAI,MAAM,OAAO;AAAA,IACtB,IAAI,QAAQ,UAAU,UAAU;AAC9B,UAAI,aAAa,cAAc;AAC7B,eAAO,CAAC,YACN,OAAO,WAAW,EAAE,GAAG,SAAS,QAAQ,sBAAsB,QAAQ,MAAM,EAAE,CAAC;AAAA,MACnF;AACA,UAAI,aAAa,YAAY;AAC3B,eAAO,CAAC,YACN,OAAO,SAAS,EAAE,GAAG,SAAS,QAAQ,sBAAsB,QAAQ,MAAM,EAAE,CAAC;AAAA,MACjF;AACA,aAAO,QAAQ,IAAI,QAAQ,UAAU,QAAQ;AAAA,IAC/C;AAAA,EACF,CAAC;AACH;AAEO,MAAM,4BAA4B;AAWlC,SAAS,oBAA6B;AAC3C,MACE,QAAQ,IAAI,4BACX,QAAQ,IAAI,qBAAqB,QAAQ,IAAI,yBAC9C,QAAQ,IAAI,+BACZ,QAAQ,IAAI,mBACZ,QAAQ,IAAI,eACZ,QAAQ,IAAI,0CACZ,QAAQ,IAAI,sCACZ,QAAQ,IAAI,6BACZ;AACA,WAAO;AAAA,EACT;AACA,QAAM,OAAO,QAAQ,IAAI,QAAQ,QAAQ,IAAI;AAC7C,MAAI,MAAM;AACR,UAAM,SAAS,KAAK,KAAK,MAAM,MAAM;AACrC,UAAM,kBAAkB,QAAQ,IAAI,+BAA+B,KAAK,KAAK,QAAQ,aAAa;AAClG,UAAM,aAAa,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,QAAQ;AAC5E,QAAI,WAAW,eAAe,KAAK,WAAW,UAAU,GAAG;AACzD,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO;AACT;AAeA,SAAS,gBAAgB,SAAiB,SAA+B;AACvE,QAAM,SAAS,QAAQ,IAAI,cAAc,QAAQ,IAAI,sBAAsB;AAC3E,QAAM,UAAU,oBAAoB;AAAA,IAClC;AAAA,IACA,oBAAoB,sBAAsB;AAAA,IAC1C;AAAA,EACF,CAAC;AACD,QAAM,QAAQ,QAAQ,OAAO;AAC7B,SAAO,6BAA6B,OAAO,IAAI,iBAAiB,KAAK,IAAI;AAC3E;AAUO,MAAM,6BAA6B,mBAAmB;AAAA,EAClD,KAAK;AAAA,EACL,OAAO;AAAA,EAEhB,eAAwB;AACtB,WAAO,kBAAkB;AAAA,EAC3B;AAAA,EAEA,MAAM,iBAA0D;AAC9D,UAAM,YAA4C,CAAC;AACnD,QAAI;AACF,YAAM,gBAAgB,MAAM,uBAAuB;AACnD,gBAAU,gBAAgB,IAAI;AAAA,QAC5B,MAAM;AAAA,QACN,cAAc;AAAA,QACd,cAAc;AAAA,QACd,SAAS,KAAK;AAAA,QACd,QAAQ,cAAc,IAAI,WAAS,MAAM,EAAE;AAAA,MAC7C;AAAA,IACF,SAAS,OAAO;AACd,cAAQ,KAAK,gDAAgD,KAAK;AAAA,IACpE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,SAAS,UAAsC;AAC7C,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,UAAU,UAAmC;AACjD,WAAO,kBAAkB,IAAI,yBAAyB;AAAA,EACxD;AAAA,EAEA,YAAY,UAA6D;AAIvE,QAAI,kBAAkB,GAAG;AACvB,aAAO,EAAE,QAAQ,wBAAwB,QAAQ,UAAU;AAAA,IAC7D;AACA,WAAO;AAAA,EACT;AAAA,EAEA,qBAAqB,MAOI;AACvB,WAAO,gBAAgB,KAAK,SAAS,KAAK,OAAO;AAAA,EACnD;AACF;AAEO,SAAS,6BAAmD;AACjE,SAAO,IAAI,qBAAqB;AAClC;","names":[]}

package/dist/providers/claude-max.d.ts

@@ -7,6 +7,7 @@
 import type { MastraModelConfig } from '@mastra/core/llm';
 import type { LanguageModelMiddleware } from 'ai';
 import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
 /**
  * Get or create the shared AuthStorage instance
  */
@@ -38,7 +39,7 @@ export declare const promptCacheMiddleware: LanguageModelMiddleware;
  * when used with the gateway). Strips `authorization` and `x-api-key`.
  */
 export declare function buildAnthropicOAuthFetch(opts?: {
-    authStorage?: AuthStorage;
+    authStorage?: CredentialStore;
 }): typeof fetch;
 /**
  * Creates an Anthropic model using Claude Max OAuth authentication
@@ -46,5 +47,6 @@ export declare function buildAnthropicOAuthFetch(opts?: {
  */
 export declare function opencodeClaudeMaxProvider(modelId?: string, options?: {
     headers?: Record<string, string>;
+    authStorage?: CredentialStore;
 }): MastraModelConfig;
 //# sourceMappingURL=claude-max.d.ts.map

package/dist/providers/claude-max.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"claude-max.d.ts","sourceRoot":"","sources":["../../src/providers/claude-max.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAoBjD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,uBAkBlC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,uBA2DnC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,KAAK,CAmD/F;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,MAAmC,EAC5C,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC7C,iBAAiB,CA0BnB"}
+{"version":3,"file":"claude-max.d.ts","sourceRoot":"","sources":["../../src/providers/claude-max.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAoBxD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,uBAkBlC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,uBA2DnC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAmDnG;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,GAAE,MAAmC,EAC5C,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CA0BnB"}

package/dist/providers/claude-max.js

@@ -133,7 +133,7 @@ function opencodeClaudeMaxProvider(modelId = "claude-sonnet-4-20250514", options
   const anthropic = createAnthropic({
     apiKey: "oauth-placeholder",
     headers,
-    fetch: buildAnthropicOAuthFetch()
+    fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage })
   });
   return wrapLanguageModel({
     model: anthropic(modelId),

package/dist/providers/claude-max.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/claude-max.ts"],"sourcesContent":["/**\n * Claude Max OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.\n * The OAuth endpoint requires a specific system message to be present.\n */\n\nimport { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\n\n// Required for Claude Max plan OAuth - the endpoint checks for this system message\nconst claudeCodeIdentity = \"You are Claude Code, Anthropic's official CLI for Claude.\";\n\n// Betas required for Claude Max plan OAuth. Merged with (not replacing) any\n// betas the AI SDK already set on the request — e.g. the SDK adds\n// `server-side-fallback-2026-06-01` when `providerOptions.anthropic.fallbacks`\n// is configured; dropping it makes the API reject the `fallbacks` body field\n// with \"Extra inputs are not permitted\".\nconst OAUTH_REQUIRED_BETAS = [\n  'oauth-2025-04-20',\n  'claude-code-20250219',\n  'interleaved-thinking-2025-05-14',\n  'fine-grained-tool-streaming-2025-05-14',\n];\n\n// Singleton auth storage instance\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Middleware that injects the Claude Code identity system message\n * Required for Claude Max OAuth authentication\n */\nexport const claudeCodeMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    // Prepend the Claude Code identity as the first system message\n    const systemMessage = {\n      role: 'system' as const,\n      content: claudeCodeIdentity,\n    };\n\n    if (params.temperature) {\n      delete params.topP;\n    }\n\n    return {\n      ...params,\n      prompt: [systemMessage, ...params.prompt],\n    };\n  },\n};\n\n/**\n * Prompt caching middleware for Anthropic\n *\n * Adds cache breakpoints at strategic locations:\n * 1. Last system message (end of static instructions + dynamic memory)\n * 2. Most recent user/assistant message (conversation context)\n *\n * This allows Anthropic to cache:\n * - System prompts and instructions (rarely change)\n * - Conversation history up to the last message\n */\nexport const promptCacheMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    const prompt = [...params.prompt];\n\n    const cacheControl = { type: 'ephemeral' as const, ttl: '5m' as const };\n\n    // Helper to add cache control to a message's last content part\n    const addCacheToMessage = (msg: any) => {\n      // For system messages with string content\n      if (typeof msg.content === 'string') {\n        return {\n          ...msg,\n          providerOptions: {\n            ...msg.providerOptions,\n            anthropic: { ...msg.providerOptions?.anthropic, cacheControl },\n          },\n        };\n      }\n\n      // For messages with array content, add to last part\n      if (Array.isArray(msg.content) && msg.content.length > 0) {\n        const content = [...msg.content];\n        const lastPart = content[content.length - 1];\n        content[content.length - 1] = {\n          ...lastPart,\n          providerOptions: {\n            ...lastPart.providerOptions,\n            anthropic: { ...lastPart.providerOptions?.anthropic, cacheControl },\n          },\n        };\n        return { ...msg, content };\n      }\n\n      return msg;\n    };\n\n    // Find the last system message index\n    let lastSystemIdx = -1;\n    for (let i = prompt.length - 1; i >= 0; i--) {\n      if ((prompt[i] as any).role === 'system') {\n        lastSystemIdx = i;\n        break;\n      }\n    }\n\n    // Add cache breakpoint to last system message\n    if (lastSystemIdx >= 0) {\n      prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);\n    }\n\n    // Add cache breakpoint to the most recent message (last in array)\n    const lastIdx = prompt.length - 1;\n    if (lastIdx >= 0 && lastIdx !== lastSystemIdx) {\n      prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);\n    }\n\n    return { ...params, prompt };\n  },\n};\n\n/**\n * Build a fetch function that handles Anthropic OAuth.\n * Preserves non-auth headers from init (critical for gateway auth header to survive\n * when used with the gateway). Strips `authorization` and `x-api-key`.\n */\nexport function buildAnthropicOAuthFetch(opts: { authStorage?: AuthStorage } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const storedCred = storage.get('anthropic');\n    if (storedCred?.type === 'api_key') {\n      throw new Error('Anthropic API key credential is configured, but OAuth is required.');\n    }\n\n    const accessToken = await storage.getApiKey('anthropic');\n    if (!accessToken) {\n      throw new Error('Not logged in to Anthropic. Run /login first.');\n    }\n\n    // Preserve existing headers, strip auth-related ones\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    const requestBetas = (headers.get('anthropic-beta') ?? '')\n      .split(',')\n      .map(beta => beta.trim())\n      .filter(Boolean);\n    headers.set('anthropic-beta', Array.from(new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(','));\n    headers.set('anthropic-version', '2023-06-01');\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : url.url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an Anthropic model using Claude Max OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n */\nexport function opencodeClaudeMaxProvider(\n  modelId: string = 'claude-sonnet-4-20250514',\n  options?: { headers?: Record<string, string> },\n): MastraModelConfig {\n  const headers = options?.headers;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const anthropic = createAnthropic({\n      apiKey: 'test-api-key',\n      headers,\n    });\n    return wrapLanguageModel({\n      model: anthropic(modelId),\n      middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n    });\n  }\n\n  const anthropic = createAnthropic({\n    apiKey: 'oauth-placeholder',\n    headers,\n    fetch: buildAnthropicOAuthFetch() as any,\n  });\n\n  // Wrap with middleware to inject Claude Code identity and enable prompt caching\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n  });\n}\n"],"mappings":"AAOA,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAElC,SAAS,mBAAmB;AAG5B,MAAM,qBAAqB;AAO3B,MAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAI,sBAA0C;AAKvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAKO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAMO,MAAM,uBAAgD;AAAA,EAC3D,sBAAsB;AAAA,EACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AAErC,UAAM,gBAAgB;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAEA,QAAI,OAAO,aAAa;AACtB,aAAO,OAAO;AAAA,IAChB;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,CAAC,eAAe,GAAG,OAAO,MAAM;AAAA,IAC1C;AAAA,EACF;AACF;AAaO,MAAM,wBAAiD;AAAA,EAC5D,sBAAsB;AAAA,EACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AACrC,UAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAEhC,UAAM,eAAe,EAAE,MAAM,aAAsB,KAAK,KAAc;AAGtE,UAAM,oBAAoB,CAAC,QAAa;AAEtC,UAAI,OAAO,IAAI,YAAY,UAAU;AACnC,eAAO;AAAA,UACL,GAAG;AAAA,UACH,iBAAiB;AAAA,YACf,GAAG,IAAI;AAAA,YACP,WAAW,EAAE,GAAG,IAAI,iBAAiB,WAAW,aAAa;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAGA,UAAI,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,GAAG;AACxD,cAAM,UAAU,CAAC,GAAG,IAAI,OAAO;AAC/B,cAAM,WAAW,QAAQ,QAAQ,SAAS,CAAC;AAC3C,gBAAQ,QAAQ,SAAS,CAAC,IAAI;AAAA,UAC5B,GAAG;AAAA,UACH,iBAAiB;AAAA,YACf,GAAG,SAAS;AAAA,YACZ,WAAW,EAAE,GAAG,SAAS,iBAAiB,WAAW,aAAa;AAAA,UACpE;AAAA,QACF;AACA,eAAO,EAAE,GAAG,KAAK,QAAQ;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT;AAGA,QAAI,gBAAgB;AACpB,aAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK;AAC3C,UAAK,OAAO,CAAC,EAAU,SAAS,UAAU;AACxC,wBAAgB;AAChB;AAAA,MACF;AAAA,IACF;AAGA,QAAI,iBAAiB,GAAG;AACtB,aAAO,aAAa,IAAI,kBAAkB,OAAO,aAAa,CAAC;AAAA,IACjE;AAGA,UAAM,UAAU,OAAO,SAAS;AAChC,QAAI,WAAW,KAAK,YAAY,eAAe;AAC7C,aAAO,OAAO,IAAI,kBAAkB,OAAO,OAAO,CAAC;AAAA,IACrD;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO;AAAA,EAC7B;AACF;AAOO,SAAS,yBAAyB,OAAsC,CAAC,GAAiB;AAC/F,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,UAAU,KAAK,eAAe,eAAe;AACnD,YAAQ,OAAO;AAEf,UAAM,aAAa,QAAQ,IAAI,WAAW;AAC1C,QAAI,YAAY,SAAS,WAAW;AAClC,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AAEA,UAAM,cAAc,MAAM,QAAQ,UAAU,WAAW;AACvD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AAGA,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,YAAM,SACJ,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC;AAC1D,aAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,cAAM,QAAQ,IAAI,YAAY;AAC9B,YAAI,UAAU,mBAAmB,UAAU,aAAa;AACtD,kBAAQ,IAAI,KAAK,KAAK;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,UAAM,gBAAgB,QAAQ,IAAI,gBAAgB,KAAK,IACpD,MAAM,GAAG,EACT,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,YAAQ,IAAI,kBAAkB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC;AACvG,YAAQ,IAAI,qBAAqB,YAAY;AAE7C,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC9C,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAM,IAAI;AAAA,QACxF,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,SAAS,0BACd,UAAkB,4BAClB,SACmB;AACnB,QAAM,UAAU,SAAS;AAGzB,MAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;AACzD,UAAMA,aAAY,gBAAgB;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AACD,WAAO,kBAAkB;AAAA,MACvB,OAAOA,WAAU,OAAO;AAAA,MACxB,YAAY,CAAC,sBAAsB,qBAAqB;AAAA,IAC1D,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,gBAAgB;AAAA,IAChC,QAAQ;AAAA,IACR;AAAA,IACA,OAAO,yBAAyB;AAAA,EAClC,CAAC;AAGD,SAAO,kBAAkB;AAAA,IACvB,OAAO,UAAU,OAAO;AAAA,IACxB,YAAY,CAAC,sBAAsB,qBAAqB;AAAA,EAC1D,CAAC;AACH;","names":["anthropic"]}
+{"version":3,"sources":["../../src/providers/claude-max.ts"],"sourcesContent":["/**\n * Claude Max OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with Claude Max plan.\n * The OAuth endpoint requires a specific system message to be present.\n */\n\nimport { createAnthropic } from '@ai-sdk/anthropic';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Required for Claude Max plan OAuth - the endpoint checks for this system message\nconst claudeCodeIdentity = \"You are Claude Code, Anthropic's official CLI for Claude.\";\n\n// Betas required for Claude Max plan OAuth. Merged with (not replacing) any\n// betas the AI SDK already set on the request — e.g. the SDK adds\n// `server-side-fallback-2026-06-01` when `providerOptions.anthropic.fallbacks`\n// is configured; dropping it makes the API reject the `fallbacks` body field\n// with \"Extra inputs are not permitted\".\nconst OAUTH_REQUIRED_BETAS = [\n  'oauth-2025-04-20',\n  'claude-code-20250219',\n  'interleaved-thinking-2025-05-14',\n  'fine-grained-tool-streaming-2025-05-14',\n];\n\n// Singleton auth storage instance\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Middleware that injects the Claude Code identity system message\n * Required for Claude Max OAuth authentication\n */\nexport const claudeCodeMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    // Prepend the Claude Code identity as the first system message\n    const systemMessage = {\n      role: 'system' as const,\n      content: claudeCodeIdentity,\n    };\n\n    if (params.temperature) {\n      delete params.topP;\n    }\n\n    return {\n      ...params,\n      prompt: [systemMessage, ...params.prompt],\n    };\n  },\n};\n\n/**\n * Prompt caching middleware for Anthropic\n *\n * Adds cache breakpoints at strategic locations:\n * 1. Last system message (end of static instructions + dynamic memory)\n * 2. Most recent user/assistant message (conversation context)\n *\n * This allows Anthropic to cache:\n * - System prompts and instructions (rarely change)\n * - Conversation history up to the last message\n */\nexport const promptCacheMiddleware: LanguageModelMiddleware = {\n  specificationVersion: 'v3',\n  transformParams: async ({ params }) => {\n    const prompt = [...params.prompt];\n\n    const cacheControl = { type: 'ephemeral' as const, ttl: '5m' as const };\n\n    // Helper to add cache control to a message's last content part\n    const addCacheToMessage = (msg: any) => {\n      // For system messages with string content\n      if (typeof msg.content === 'string') {\n        return {\n          ...msg,\n          providerOptions: {\n            ...msg.providerOptions,\n            anthropic: { ...msg.providerOptions?.anthropic, cacheControl },\n          },\n        };\n      }\n\n      // For messages with array content, add to last part\n      if (Array.isArray(msg.content) && msg.content.length > 0) {\n        const content = [...msg.content];\n        const lastPart = content[content.length - 1];\n        content[content.length - 1] = {\n          ...lastPart,\n          providerOptions: {\n            ...lastPart.providerOptions,\n            anthropic: { ...lastPart.providerOptions?.anthropic, cacheControl },\n          },\n        };\n        return { ...msg, content };\n      }\n\n      return msg;\n    };\n\n    // Find the last system message index\n    let lastSystemIdx = -1;\n    for (let i = prompt.length - 1; i >= 0; i--) {\n      if ((prompt[i] as any).role === 'system') {\n        lastSystemIdx = i;\n        break;\n      }\n    }\n\n    // Add cache breakpoint to last system message\n    if (lastSystemIdx >= 0) {\n      prompt[lastSystemIdx] = addCacheToMessage(prompt[lastSystemIdx]);\n    }\n\n    // Add cache breakpoint to the most recent message (last in array)\n    const lastIdx = prompt.length - 1;\n    if (lastIdx >= 0 && lastIdx !== lastSystemIdx) {\n      prompt[lastIdx] = addCacheToMessage(prompt[lastIdx]);\n    }\n\n    return { ...params, prompt };\n  },\n};\n\n/**\n * Build a fetch function that handles Anthropic OAuth.\n * Preserves non-auth headers from init (critical for gateway auth header to survive\n * when used with the gateway). Strips `authorization` and `x-api-key`.\n */\nexport function buildAnthropicOAuthFetch(opts: { authStorage?: CredentialStore } = {}): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const storedCred = storage.get('anthropic');\n    if (storedCred?.type === 'api_key') {\n      throw new Error('Anthropic API key credential is configured, but OAuth is required.');\n    }\n\n    const accessToken = await storage.getApiKey('anthropic');\n    if (!accessToken) {\n      throw new Error('Not logged in to Anthropic. Run /login first.');\n    }\n\n    // Preserve existing headers, strip auth-related ones\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    const requestBetas = (headers.get('anthropic-beta') ?? '')\n      .split(',')\n      .map(beta => beta.trim())\n      .filter(Boolean);\n    headers.set('anthropic-beta', Array.from(new Set([...OAUTH_REQUIRED_BETAS, ...requestBetas])).join(','));\n    headers.set('anthropic-version', '2023-06-01');\n\n    try {\n      return await fetch(url, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: url instanceof URL ? url.toString() : typeof url === 'string' ? url : url.url,\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Creates an Anthropic model using Claude Max OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n */\nexport function opencodeClaudeMaxProvider(\n  modelId: string = 'claude-sonnet-4-20250514',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const anthropic = createAnthropic({\n      apiKey: 'test-api-key',\n      headers,\n    });\n    return wrapLanguageModel({\n      model: anthropic(modelId),\n      middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n    });\n  }\n\n  const anthropic = createAnthropic({\n    apiKey: 'oauth-placeholder',\n    headers,\n    fetch: buildAnthropicOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Wrap with middleware to inject Claude Code identity and enable prompt caching\n  return wrapLanguageModel({\n    model: anthropic(modelId),\n    middleware: [claudeCodeMiddleware, promptCacheMiddleware],\n  });\n}\n"],"mappings":"AAOA,SAAS,uBAAuB;AAEhC,SAAS,yBAAyB;AAElC,SAAS,mBAAmB;AAI5B,MAAM,qBAAqB;AAO3B,MAAM,uBAAuB;AAAA,EAC3B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAI,sBAA0C;AAKvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAKO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAMO,MAAM,uBAAgD;AAAA,EAC3D,sBAAsB;AAAA,EACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AAErC,UAAM,gBAAgB;AAAA,MACpB,MAAM;AAAA,MACN,SAAS;AAAA,IACX;AAEA,QAAI,OAAO,aAAa;AACtB,aAAO,OAAO;AAAA,IAChB;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,QAAQ,CAAC,eAAe,GAAG,OAAO,MAAM;AAAA,IAC1C;AAAA,EACF;AACF;AAaO,MAAM,wBAAiD;AAAA,EAC5D,sBAAsB;AAAA,EACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AACrC,UAAM,SAAS,CAAC,GAAG,OAAO,MAAM;AAEhC,UAAM,eAAe,EAAE,MAAM,aAAsB,KAAK,KAAc;AAGtE,UAAM,oBAAoB,CAAC,QAAa;AAEtC,UAAI,OAAO,IAAI,YAAY,UAAU;AACnC,eAAO;AAAA,UACL,GAAG;AAAA,UACH,iBAAiB;AAAA,YACf,GAAG,IAAI;AAAA,YACP,WAAW,EAAE,GAAG,IAAI,iBAAiB,WAAW,aAAa;AAAA,UAC/D;AAAA,QACF;AAAA,MACF;AAGA,UAAI,MAAM,QAAQ,IAAI,OAAO,KAAK,IAAI,QAAQ,SAAS,GAAG;AACxD,cAAM,UAAU,CAAC,GAAG,IAAI,OAAO;AAC/B,cAAM,WAAW,QAAQ,QAAQ,SAAS,CAAC;AAC3C,gBAAQ,QAAQ,SAAS,CAAC,IAAI;AAAA,UAC5B,GAAG;AAAA,UACH,iBAAiB;AAAA,YACf,GAAG,SAAS;AAAA,YACZ,WAAW,EAAE,GAAG,SAAS,iBAAiB,WAAW,aAAa;AAAA,UACpE;AAAA,QACF;AACA,eAAO,EAAE,GAAG,KAAK,QAAQ;AAAA,MAC3B;AAEA,aAAO;AAAA,IACT;AAGA,QAAI,gBAAgB;AACpB,aAAS,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK;AAC3C,UAAK,OAAO,CAAC,EAAU,SAAS,UAAU;AACxC,wBAAgB;AAChB;AAAA,MACF;AAAA,IACF;AAGA,QAAI,iBAAiB,GAAG;AACtB,aAAO,aAAa,IAAI,kBAAkB,OAAO,aAAa,CAAC;AAAA,IACjE;AAGA,UAAM,UAAU,OAAO,SAAS;AAChC,QAAI,WAAW,KAAK,YAAY,eAAe;AAC7C,aAAO,OAAO,IAAI,kBAAkB,OAAO,OAAO,CAAC;AAAA,IACrD;AAEA,WAAO,EAAE,GAAG,QAAQ,OAAO;AAAA,EAC7B;AACF;AAOO,SAAS,yBAAyB,OAA0C,CAAC,GAAiB;AACnG,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,UAAU,KAAK,eAAe,eAAe;AACnD,YAAQ,OAAO;AAEf,UAAM,aAAa,QAAQ,IAAI,WAAW;AAC1C,QAAI,YAAY,SAAS,WAAW;AAClC,YAAM,IAAI,MAAM,oEAAoE;AAAA,IACtF;AAEA,UAAM,cAAc,MAAM,QAAQ,UAAU,WAAW;AACvD,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AAGA,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,YAAM,SACJ,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC;AAC1D,aAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,cAAM,QAAQ,IAAI,YAAY;AAC9B,YAAI,UAAU,mBAAmB,UAAU,aAAa;AACtD,kBAAQ,IAAI,KAAK,KAAK;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,UAAM,gBAAgB,QAAQ,IAAI,gBAAgB,KAAK,IACpD,MAAM,GAAG,EACT,IAAI,UAAQ,KAAK,KAAK,CAAC,EACvB,OAAO,OAAO;AACjB,YAAQ,IAAI,kBAAkB,MAAM,KAAK,oBAAI,IAAI,CAAC,GAAG,sBAAsB,GAAG,YAAY,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC;AACvG,YAAQ,IAAI,qBAAqB,YAAY;AAE7C,QAAI;AACF,aAAO,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IAC9C,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,eAAe,MAAM,IAAI,SAAS,IAAI,OAAO,QAAQ,WAAW,MAAM,IAAI;AAAA,QACxF,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAMO,SAAS,0BACd,UAAkB,4BAClB,SACmB;AACnB,QAAM,UAAU,SAAS;AAGzB,MAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;AACzD,UAAMA,aAAY,gBAAgB;AAAA,MAChC,QAAQ;AAAA,MACR;AAAA,IACF,CAAC;AACD,WAAO,kBAAkB;AAAA,MACvB,OAAOA,WAAU,OAAO;AAAA,MACxB,YAAY,CAAC,sBAAsB,qBAAqB;AAAA,IAC1D,CAAC;AAAA,EACH;AAEA,QAAM,YAAY,gBAAgB;AAAA,IAChC,QAAQ;AAAA,IACR;AAAA,IACA,OAAO,yBAAyB,EAAE,aAAa,SAAS,YAAY,CAAC;AAAA,EACvE,CAAC;AAGD,SAAO,kBAAkB;AAAA,IACvB,OAAO,UAAU,OAAO;AAAA,IACxB,YAAY,CAAC,sBAAsB,qBAAqB;AAAA,EAC1D,CAAC;AACH;","names":["anthropic"]}

package/dist/providers/github-copilot.d.ts

@@ -13,6 +13,7 @@
 import type { MastraModelConfig } from '@mastra/core/llm';
 import type { CopilotModelEntry } from '../auth/providers/github-copilot.js';
 import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
 /** Get or create the shared AuthStorage instance. */
 export declare function getAuthStorage(): AuthStorage;
 /** Set a custom AuthStorage instance (useful for tests / TUI integration). */
@@ -25,7 +26,7 @@ export declare function setAuthStorage(storage: AuthStorage | undefined): void;
  * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.
  */
 export declare function buildGitHubCopilotOAuthFetch(opts?: {
-    authStorage?: AuthStorage;
+    authStorage?: CredentialStore;
     rewriteUrl?: boolean;
 }): typeof fetch;
 /**
@@ -37,6 +38,7 @@ export declare function buildGitHubCopilotOAuthFetch(opts?: {
  */
 export declare function githubCopilotProvider(modelId?: string, options?: {
     headers?: Record<string, string>;
+    authStorage?: CredentialStore;
 }): MastraModelConfig;
 /** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */
 export declare function clearCopilotCatalogCache(): void;

package/dist/providers/github-copilot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../src/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAM1D,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAOjD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAqED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7D,OAAO,KAAK,CAgFd;AAwED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,MAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC7C,iBAAiB,CAiBnB;AAsCD,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyDnH"}
+{"version":3,"file":"github-copilot.d.ts","sourceRoot":"","sources":["../../src/providers/github-copilot.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAM1D,OAAO,KAAK,EAAE,iBAAiB,EAA4B,MAAM,qCAAqC,CAAC;AACvG,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAOxD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAqED;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC1C,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAgFd;AAwED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,MAAkB,EAC3B,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CAiBnB;AAsCD,wFAAwF;AACxF,wBAAgB,wBAAwB,IAAI,IAAI,CAG/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,sBAAsB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAyDnH"}

package/dist/providers/github-copilot.js

@@ -175,7 +175,7 @@ function githubCopilotProvider(modelId = "gpt-4.1", options) {
     baseURL: "https://api.githubcopilot.com",
     apiKey: process.env.NODE_ENV === "test" || process.env.VITEST ? "test-api-key" : "oauth-placeholder",
     headers,
-    fetch: process.env.NODE_ENV === "test" || process.env.VITEST ? void 0 : buildGitHubCopilotOAuthFetch({ rewriteUrl: false })
+    fetch: process.env.NODE_ENV === "test" || process.env.VITEST ? void 0 : buildGitHubCopilotOAuthFetch({ rewriteUrl: false, authStorage: options?.authStorage })
   });
   return wrapLanguageModel({
     model: copilot.chatModel(modelId),

package/dist/providers/github-copilot.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/github-copilot.ts"],"sourcesContent":["/**\n * GitHub Copilot OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.\n * The Copilot API speaks an OpenAI-compatible chat format, so we plug\n * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject\n * the bearer token and Copilot-specific headers.\n *\n * Inspired by:\n *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts\n *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport type { JSONSchema7 } from '@mastra/schema-compat';\nimport { applyCompatLayer, GoogleSchemaCompatLayer } from '@mastra/schema-compat';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from '../auth/providers/github-copilot.js';\nimport type { CopilotModelEntry, GitHubCopilotCredentials } from '../auth/providers/github-copilot.js';\nimport { AuthStorage } from '../auth/storage.js';\n\nconst COPILOT_PROVIDER_ID = 'github-copilot';\n\n// Singleton auth storage instance (shared with claude-max.ts / openai-codex.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather\n * than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these\n * differently via the `x-initiator` header.\n */\nfunction detectIsAgent(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const messages = obj.messages;\n  if (Array.isArray(messages) && messages.length > 0) {\n    const last = messages[messages.length - 1] as { role?: string; content?: unknown };\n    if (last?.role && last.role !== 'user') return true;\n    if (Array.isArray(last?.content)) {\n      // If the last user turn carries any tool_result parts, treat it as an agent turn.\n      const hasToolResult = last.content.some(\n        (part: unknown) => part && typeof part === 'object' && (part as { type?: string }).type === 'tool_result',\n      );\n      if (hasToolResult) return true;\n    }\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input) && input.length > 0) {\n    const last = input[input.length - 1] as { role?: string };\n    if (last?.role && last.role !== 'user') return true;\n  }\n\n  return false;\n}\n\n/** Detect image/vision content in a request body. */\nfunction detectIsVision(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const matchPart = (part: unknown): boolean => {\n    if (!part || typeof part !== 'object') return false;\n    const t = (part as { type?: string }).type;\n    return t === 'image' || t === 'image_url' || t === 'input_image';\n  };\n\n  const messages = obj.messages;\n  if (Array.isArray(messages)) {\n    return messages.some(\n      (msg: unknown) =>\n        msg &&\n        typeof msg === 'object' &&\n        Array.isArray((msg as { content?: unknown }).content) &&\n        ((msg as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input)) {\n    return input.some(\n      (item: unknown) =>\n        item &&\n        typeof item === 'object' &&\n        Array.isArray((item as { content?: unknown }).content) &&\n        ((item as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  return false;\n}\n\n/**\n * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.\n *\n * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).\n * - Adds the VS Code-like Copilot headers required by the API.\n * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.\n */\nexport function buildGitHubCopilotOAuthFetch(\n  opts: { authStorage?: AuthStorage; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(COPILOT_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to GitHub Copilot. Run /login first.');\n    }\n\n    // getApiKey() refreshes the Copilot bearer if it has expired.\n    const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh GitHub Copilot token. Please /login again.');\n    }\n    storage.reload();\n\n    const enterpriseUrl = (cred as GitHubCopilotCredentials).enterpriseUrl;\n\n    let parsedBody: unknown;\n    if (typeof init?.body === 'string') {\n      try {\n        parsedBody = JSON.parse(init.body);\n      } catch {\n        parsedBody = undefined;\n      }\n    }\n    const isAgent = detectIsAgent(parsedBody);\n    const isVision = detectIsVision(parsedBody);\n\n    // Preserve non-auth headers from caller.\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('x-initiator', isAgent ? 'agent' : 'user');\n    headers.set('Openai-Intent', 'conversation-edits');\n    if (isVision) {\n      headers.set('Copilot-Vision-Request', 'true');\n    }\n    for (const [key, value] of Object.entries(COPILOT_HEADERS)) {\n      // Only set if caller didn't already provide it (allow overrides for tests).\n      if (!headers.has(key)) {\n        headers.set(key, value);\n      }\n    }\n\n    const finalUrl =\n      opts.rewriteUrl !== false\n        ? rewriteToCopilotBase(url, accessToken, enterpriseUrl)\n        : url instanceof URL\n          ? url\n          : typeof url === 'string'\n            ? new URL(url)\n            : new URL((url as Request).url);\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction rewriteToCopilotBase(url: string | URL | Request, token: string, enterpriseDomain?: string): URL {\n  const original = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n  const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));\n  // Copilot's OpenAI-compatible API serves endpoints at the root of the base host\n  // (`/chat/completions`, `/responses`, `/models`, ...) — not under a `/v1/` prefix\n  // like api.openai.com does. The @ai-sdk/openai default baseURL is\n  // `https://api.openai.com/v1`, so the SDK builds requests like\n  // `https://api.openai.com/v1/chat/completions`. Strip the leading `/v1` segment\n  // when rewriting onto the Copilot base or Copilot will return 404 Not Found.\n  const pathname = original.pathname.replace(/^\\/v1(\\/|$)/, '/');\n  return new URL(`${pathname}${original.search}`, base);\n}\n\nfunction isGeminiModel(modelId: string): boolean {\n  return modelId.startsWith('gemini-');\n}\n\nfunction applyGeminiSchemaCompatToTools(modelId: string, tools: unknown): unknown {\n  if (!Array.isArray(tools)) {\n    return tools;\n  }\n\n  const compatLayer = new GoogleSchemaCompatLayer({\n    provider: COPILOT_PROVIDER_ID,\n    modelId,\n    supportsStructuredOutputs: false,\n  });\n\n  return tools.map(tool => {\n    if (!tool || typeof tool !== 'object' || (tool as { type?: unknown }).type !== 'function') {\n      return tool;\n    }\n\n    const functionTool = tool as { inputSchema?: JSONSchema7 };\n    if (!functionTool.inputSchema) {\n      return tool;\n    }\n\n    return {\n      ...functionTool,\n      inputSchema: applyCompatLayer({\n        schema: functionTool.inputSchema,\n        compatLayers: [compatLayer],\n        mode: 'aiSdkSchema',\n      }).jsonSchema as JSONSchema7,\n    };\n  });\n}\n\n/** Middleware that prevents sending parameters Copilot's endpoint rejects. */\nfunction createCopilotMiddleware(modelId: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      if (isGeminiModel(modelId)) {\n        (params as { tools?: unknown }).tools = applyGeminiSchemaCompatToTools(\n          modelId,\n          (params as { tools?: unknown }).tools,\n        );\n      }\n\n      return params;\n    },\n  };\n}\n\n/**\n * Creates a model that talks to GitHub Copilot using OAuth credentials.\n *\n * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot\n * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL\n * instead of the OpenAI provider plus URL rewriting.\n */\nexport function githubCopilotProvider(\n  modelId: string = 'gpt-4.1',\n  options?: { headers?: Record<string, string> },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const copilot = createOpenAICompatible({\n    name: COPILOT_PROVIDER_ID,\n    baseURL: 'https://api.githubcopilot.com',\n    apiKey: process.env.NODE_ENV === 'test' || process.env.VITEST ? 'test-api-key' : 'oauth-placeholder',\n    headers,\n    fetch:\n      process.env.NODE_ENV === 'test' || process.env.VITEST\n        ? undefined\n        : (buildGitHubCopilotOAuthFetch({ rewriteUrl: false }) as any),\n  });\n\n  return wrapLanguageModel({\n    model: copilot.chatModel(modelId),\n    middleware: [createCopilotMiddleware(modelId)],\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live model catalog\n// ---------------------------------------------------------------------------\n\n/**\n * Hard-coded fallback advertised when the live `/models` request fails (network\n * down, expired token, etc.). Keep this conservative because the live catalog is\n * the source of truth for the user's currently-enabled Copilot models.\n *\n * Available across all paid Copilot tiers and free of premium-request charges.\n */\nconst COPILOT_FALLBACK_MODELS: CopilotModelEntry[] = [\n  {\n    id: 'gpt-4.1',\n    name: 'GPT-4.1',\n    vendor: 'OpenAI',\n    supportedEndpoints: ['/chat/completions'],\n    isAnthropicShaped: false,\n    supportsVision: true,\n    supportsToolCalls: true,\n  },\n];\n\nconst CATALOG_TTL_MS = 10 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: CopilotModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<CopilotModelEntry[]> | null = null;\n\n/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */\nexport function clearCopilotCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\n/**\n * Return the user's currently-available Copilot models.\n *\n * - Returns `[]` when the user is not logged in to GitHub Copilot.\n * - Returns the cached list when a recent fetch succeeded.\n * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters\n *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that for 1 minute to avoid hammering the API.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getCopilotModelCatalog(opts: { authStorage?: AuthStorage } = {}): Promise<CopilotModelEntry[]> {\n  const storage = opts.authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get(COPILOT_PROVIDER_ID);\n  if (!cred || cred.type !== 'oauth') {\n    return [];\n  }\n\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<CopilotModelEntry[]> => {\n    try {\n      // getApiKey() refreshes the Copilot bearer if it has expired.\n      const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n      if (!accessToken) throw new Error('No Copilot bearer token');\n      storage.reload();\n\n      const refreshed = storage.get(COPILOT_PROVIDER_ID);\n      const enterpriseUrl = (refreshed as GitHubCopilotCredentials | undefined)?.enterpriseUrl;\n      const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);\n\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n      try {\n        const models = await fetchCopilotModels({\n          baseUrl,\n          bearerToken: accessToken,\n          signal: controller.signal,\n        });\n        catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n        return models;\n      } finally {\n        clearTimeout(timer);\n      }\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: COPILOT_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live GitHub Copilot models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return COPILOT_FALLBACK_MODELS;\n    } finally {\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":"AAaA,SAAS,8BAA8B;AAGvC,SAAS,kBAAkB,+BAA+B;AAC1D,SAAS,yBAAyB;AAElC,SAAS,iBAAiB,oBAAoB,+BAA+B;AAE7E,SAAS,mBAAmB;AAE5B,MAAM,sBAAsB;AAG5B,IAAI,sBAA0C;AAGvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAGO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAOA,SAAS,cAAc,MAAwB;AAC7C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,MAAM;AAEZ,QAAM,WAAW,IAAI;AACrB,MAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAAG;AAClD,UAAM,OAAO,SAAS,SAAS,SAAS,CAAC;AACzC,QAAI,MAAM,QAAQ,KAAK,SAAS,OAAQ,QAAO;AAC/C,QAAI,MAAM,QAAQ,MAAM,OAAO,GAAG;AAEhC,YAAM,gBAAgB,KAAK,QAAQ;AAAA,QACjC,CAAC,SAAkB,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS;AAAA,MAC9F;AACA,UAAI,cAAe,QAAO;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI;AAClB,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;AAC5C,UAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,QAAI,MAAM,QAAQ,KAAK,SAAS,OAAQ,QAAO;AAAA,EACjD;AAEA,SAAO;AACT;AAGA,SAAS,eAAe,MAAwB;AAC9C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,MAAM;AAEZ,QAAM,YAAY,CAAC,SAA2B;AAC5C,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,IAAK,KAA2B;AACtC,WAAO,MAAM,WAAW,MAAM,eAAe,MAAM;AAAA,EACrD;AAEA,QAAM,WAAW,IAAI;AACrB,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,WAAO,SAAS;AAAA,MACd,CAAC,QACC,OACA,OAAO,QAAQ,YACf,MAAM,QAAS,IAA8B,OAAO,KAClD,IAA+B,QAAsB,KAAK,SAAS;AAAA,IACzE;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI;AAClB,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM;AAAA,MACX,CAAC,SACC,QACA,OAAO,SAAS,YAChB,MAAM,QAAS,KAA+B,OAAO,KACnD,KAAgC,QAAsB,KAAK,SAAS;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AASO,SAAS,6BACd,OAA4D,CAAC,GAC/C;AACd,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,UAAU,KAAK,eAAe,eAAe;AACnD,YAAQ,OAAO;AAEf,UAAM,OAAO,QAAQ,IAAI,mBAAmB;AAC5C,QAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACtE;AAGA,UAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;AAC/D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AACA,YAAQ,OAAO;AAEf,UAAM,gBAAiB,KAAkC;AAEzD,QAAI;AACJ,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,UAAI;AACF,qBAAa,KAAK,MAAM,KAAK,IAAI;AAAA,MACnC,QAAQ;AACN,qBAAa;AAAA,MACf;AAAA,IACF;AACA,UAAM,UAAU,cAAc,UAAU;AACxC,UAAM,WAAW,eAAe,UAAU;AAG1C,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,YAAM,SACJ,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC;AAC1D,aAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,cAAM,QAAQ,IAAI,YAAY;AAC9B,YAAI,UAAU,mBAAmB,UAAU,aAAa;AACtD,kBAAQ,IAAI,KAAK,KAAK;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,YAAQ,IAAI,eAAe,UAAU,UAAU,MAAM;AACrD,YAAQ,IAAI,iBAAiB,oBAAoB;AACjD,QAAI,UAAU;AACZ,cAAQ,IAAI,0BAA0B,MAAM;AAAA,IAC9C;AACA,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,eAAe,GAAG;AAE1D,UAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,gBAAQ,IAAI,KAAK,KAAK;AAAA,MACxB;AAAA,IACF;AAEA,UAAM,WACJ,KAAK,eAAe,QAChB,qBAAqB,KAAK,aAAa,aAAa,IACpD,eAAe,MACb,MACA,OAAO,QAAQ,WACb,IAAI,IAAI,GAAG,IACX,IAAI,IAAK,IAAgB,GAAG;AAEtC,QAAI;AACF,aAAO,MAAM,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,SAAS,SAAS;AAAA,QAChC,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,KAA6B,OAAe,kBAAgC;AACxG,QAAM,WAAW,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;AACxG,QAAM,OAAO,IAAI,IAAI,wBAAwB,OAAO,gBAAgB,CAAC;AAOrE,QAAM,WAAW,SAAS,SAAS,QAAQ,eAAe,GAAG;AAC7D,SAAO,IAAI,IAAI,GAAG,QAAQ,GAAG,SAAS,MAAM,IAAI,IAAI;AACtD;AAEA,SAAS,cAAc,SAA0B;AAC/C,SAAO,QAAQ,WAAW,SAAS;AACrC;AAEA,SAAS,+BAA+B,SAAiB,OAAyB;AAChF,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,IAAI,wBAAwB;AAAA,IAC9C,UAAU;AAAA,IACV;AAAA,IACA,2BAA2B;AAAA,EAC7B,CAAC;AAED,SAAO,MAAM,IAAI,UAAQ;AACvB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAa,KAA4B,SAAS,YAAY;AACzF,aAAO;AAAA,IACT;AAEA,UAAM,eAAe;AACrB,QAAI,CAAC,aAAa,aAAa;AAC7B,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,aAAa,iBAAiB;AAAA,QAC5B,QAAQ,aAAa;AAAA,QACrB,cAAc,CAAC,WAAW;AAAA,QAC1B,MAAM;AAAA,MACR,CAAC,EAAE;AAAA,IACL;AAAA,EACF,CAAC;AACH;AAGA,SAAS,wBAAwB,SAA0C;AACzE,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AACrC,UAAI,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,MAAM;AACnE,eAAO,OAAO;AAAA,MAChB;AAEA,UAAI,cAAc,OAAO,GAAG;AAC1B,QAAC,OAA+B,QAAQ;AAAA,UACtC;AAAA,UACC,OAA+B;AAAA,QAClC;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,SAAS,sBACd,UAAkB,WAClB,SACmB;AACnB,QAAM,UAAU,SAAS;AACzB,QAAM,UAAU,uBAAuB;AAAA,IACrC,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAAS,iBAAiB;AAAA,IACjF;AAAA,IACA,OACE,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAC3C,SACC,6BAA6B,EAAE,YAAY,MAAM,CAAC;AAAA,EAC3D,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,OAAO,QAAQ,UAAU,OAAO;AAAA,IAChC,YAAY,CAAC,wBAAwB,OAAO,CAAC;AAAA,EAC/C,CAAC;AACH;AAaA,MAAM,0BAA+C;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,oBAAoB,CAAC,mBAAmB;AAAA,IACxC,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AACF;AAEA,MAAM,iBAAiB,KAAK,KAAK;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;AAQjC,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;AAGlD,SAAS,2BAAiC;AAC/C,iBAAe;AACf,kBAAgB;AAClB;AAcA,eAAsB,uBAAuB,OAAsC,CAAC,GAAiC;AACnH,QAAM,UAAU,KAAK,eAAe,eAAe;AACnD,UAAQ,OAAO;AAEf,QAAM,OAAO,QAAQ,IAAI,mBAAmB;AAC5C,MAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,gBAAgB,MAAM,aAAa,YAAY,aAAa,KAAK;AACnE,WAAO,aAAa;AAAA,EACtB;AAEA,MAAI,cAAe,QAAO;AAE1B,mBAAiB,YAA0C;AACzD,QAAI;AAEF,YAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;AAC/D,UAAI,CAAC,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAC3D,cAAQ,OAAO;AAEf,YAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,YAAM,gBAAiB,WAAoD;AAC3E,YAAM,UAAU,wBAAwB,aAAa,aAAa;AAElE,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,wBAAwB;AAC3E,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB;AAAA,UACtC;AAAA,UACA,aAAa;AAAA,UACb,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,uBAAe,EAAE,WAAW,KAAK,IAAI,GAAG,KAAK,gBAAgB,OAAO;AACpE,eAAO;AAAA,MACT,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AACd,qBAAe;AAAA,QACb,WAAW,KAAK,IAAI;AAAA,QACpB,KAAK;AAAA,QACL,QAAQ;AAAA,MACV;AACA,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AACA,aAAO;AAAA,IACT,UAAE;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG;AAEH,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../../src/providers/github-copilot.ts"],"sourcesContent":["/**\n * GitHub Copilot OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with GitHub Copilot's chat API.\n * The Copilot API speaks an OpenAI-compatible chat format, so we plug\n * `@ai-sdk/openai-compatible` into Copilot's API URL and use a custom fetch to inject\n * the bearer token and Copilot-specific headers.\n *\n * Inspired by:\n *   - opencode: https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/plugin/github-copilot/copilot.ts\n *   - pi-mono:  https://github.com/badlogic/pi-mono/blob/main/packages/ai/src/utils/oauth/github-copilot.ts\n */\n\nimport { createOpenAICompatible } from '@ai-sdk/openai-compatible';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport type { JSONSchema7 } from '@mastra/schema-compat';\nimport { applyCompatLayer, GoogleSchemaCompatLayer } from '@mastra/schema-compat';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { COPILOT_HEADERS, fetchCopilotModels, getGitHubCopilotBaseUrl } from '../auth/providers/github-copilot.js';\nimport type { CopilotModelEntry, GitHubCopilotCredentials } from '../auth/providers/github-copilot.js';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\nconst COPILOT_PROVIDER_ID = 'github-copilot';\n\n// Singleton auth storage instance (shared with claude-max.ts / openai-codex.ts when not overridden).\nlet authStorageInstance: AuthStorage | null = null;\n\n/** Get or create the shared AuthStorage instance. */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/** Set a custom AuthStorage instance (useful for tests / TUI integration). */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n/**\n * Heuristic: did this request come from the agent (e.g. tool result follow-ups) rather\n * than a fresh user turn? Mirrors opencode's `isAgent` logic — Copilot bills these\n * differently via the `x-initiator` header.\n */\nfunction detectIsAgent(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const messages = obj.messages;\n  if (Array.isArray(messages) && messages.length > 0) {\n    const last = messages[messages.length - 1] as { role?: string; content?: unknown };\n    if (last?.role && last.role !== 'user') return true;\n    if (Array.isArray(last?.content)) {\n      // If the last user turn carries any tool_result parts, treat it as an agent turn.\n      const hasToolResult = last.content.some(\n        (part: unknown) => part && typeof part === 'object' && (part as { type?: string }).type === 'tool_result',\n      );\n      if (hasToolResult) return true;\n    }\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input) && input.length > 0) {\n    const last = input[input.length - 1] as { role?: string };\n    if (last?.role && last.role !== 'user') return true;\n  }\n\n  return false;\n}\n\n/** Detect image/vision content in a request body. */\nfunction detectIsVision(body: unknown): boolean {\n  if (!body || typeof body !== 'object') return false;\n  const obj = body as Record<string, unknown>;\n\n  const matchPart = (part: unknown): boolean => {\n    if (!part || typeof part !== 'object') return false;\n    const t = (part as { type?: string }).type;\n    return t === 'image' || t === 'image_url' || t === 'input_image';\n  };\n\n  const messages = obj.messages;\n  if (Array.isArray(messages)) {\n    return messages.some(\n      (msg: unknown) =>\n        msg &&\n        typeof msg === 'object' &&\n        Array.isArray((msg as { content?: unknown }).content) &&\n        ((msg as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  const input = obj.input;\n  if (Array.isArray(input)) {\n    return input.some(\n      (item: unknown) =>\n        item &&\n        typeof item === 'object' &&\n        Array.isArray((item as { content?: unknown }).content) &&\n        ((item as { content: unknown[] }).content as unknown[]).some(matchPart),\n    );\n  }\n\n  return false;\n}\n\n/**\n * Build a fetch wrapper that authenticates with GitHub Copilot OAuth.\n *\n * - Injects the short-lived Copilot bearer token (auto-refreshed by AuthStorage).\n * - Adds the VS Code-like Copilot headers required by the API.\n * - Rewrites the request URL onto the per-token API base when `rewriteUrl` is true.\n */\nexport function buildGitHubCopilotOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const storage = opts.authStorage ?? getAuthStorage();\n    storage.reload();\n\n    const cred = storage.get(COPILOT_PROVIDER_ID);\n    if (!cred || cred.type !== 'oauth') {\n      throw new Error('Not logged in to GitHub Copilot. Run /login first.');\n    }\n\n    // getApiKey() refreshes the Copilot bearer if it has expired.\n    const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n    if (!accessToken) {\n      throw new Error('Failed to refresh GitHub Copilot token. Please /login again.');\n    }\n    storage.reload();\n\n    const enterpriseUrl = (cred as GitHubCopilotCredentials).enterpriseUrl;\n\n    let parsedBody: unknown;\n    if (typeof init?.body === 'string') {\n      try {\n        parsedBody = JSON.parse(init.body);\n      } catch {\n        parsedBody = undefined;\n      }\n    }\n    const isAgent = detectIsAgent(parsedBody);\n    const isVision = detectIsVision(parsedBody);\n\n    // Preserve non-auth headers from caller.\n    const headers = new Headers();\n    if (init?.headers) {\n      const source =\n        init.headers instanceof Headers\n          ? init.headers\n          : Array.isArray(init.headers)\n            ? new Headers(init.headers as Array<[string, string]>)\n            : new Headers(init.headers as Record<string, string>);\n      source.forEach((value, key) => {\n        const lower = key.toLowerCase();\n        if (lower !== 'authorization' && lower !== 'x-api-key') {\n          headers.set(key, value);\n        }\n      });\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('x-initiator', isAgent ? 'agent' : 'user');\n    headers.set('Openai-Intent', 'conversation-edits');\n    if (isVision) {\n      headers.set('Copilot-Vision-Request', 'true');\n    }\n    for (const [key, value] of Object.entries(COPILOT_HEADERS)) {\n      // Only set if caller didn't already provide it (allow overrides for tests).\n      if (!headers.has(key)) {\n        headers.set(key, value);\n      }\n    }\n\n    const finalUrl =\n      opts.rewriteUrl !== false\n        ? rewriteToCopilotBase(url, accessToken, enterpriseUrl)\n        : url instanceof URL\n          ? url\n          : typeof url === 'string'\n            ? new URL(url)\n            : new URL((url as Request).url);\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\nfunction rewriteToCopilotBase(url: string | URL | Request, token: string, enterpriseDomain?: string): URL {\n  const original = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n  const base = new URL(getGitHubCopilotBaseUrl(token, enterpriseDomain));\n  // Copilot's OpenAI-compatible API serves endpoints at the root of the base host\n  // (`/chat/completions`, `/responses`, `/models`, ...) — not under a `/v1/` prefix\n  // like api.openai.com does. The @ai-sdk/openai default baseURL is\n  // `https://api.openai.com/v1`, so the SDK builds requests like\n  // `https://api.openai.com/v1/chat/completions`. Strip the leading `/v1` segment\n  // when rewriting onto the Copilot base or Copilot will return 404 Not Found.\n  const pathname = original.pathname.replace(/^\\/v1(\\/|$)/, '/');\n  return new URL(`${pathname}${original.search}`, base);\n}\n\nfunction isGeminiModel(modelId: string): boolean {\n  return modelId.startsWith('gemini-');\n}\n\nfunction applyGeminiSchemaCompatToTools(modelId: string, tools: unknown): unknown {\n  if (!Array.isArray(tools)) {\n    return tools;\n  }\n\n  const compatLayer = new GoogleSchemaCompatLayer({\n    provider: COPILOT_PROVIDER_ID,\n    modelId,\n    supportsStructuredOutputs: false,\n  });\n\n  return tools.map(tool => {\n    if (!tool || typeof tool !== 'object' || (tool as { type?: unknown }).type !== 'function') {\n      return tool;\n    }\n\n    const functionTool = tool as { inputSchema?: JSONSchema7 };\n    if (!functionTool.inputSchema) {\n      return tool;\n    }\n\n    return {\n      ...functionTool,\n      inputSchema: applyCompatLayer({\n        schema: functionTool.inputSchema,\n        compatLayers: [compatLayer],\n        mode: 'aiSdkSchema',\n      }).jsonSchema as JSONSchema7,\n    };\n  });\n}\n\n/** Middleware that prevents sending parameters Copilot's endpoint rejects. */\nfunction createCopilotMiddleware(modelId: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      if (isGeminiModel(modelId)) {\n        (params as { tools?: unknown }).tools = applyGeminiSchemaCompatToTools(\n          modelId,\n          (params as { tools?: unknown }).tools,\n        );\n      }\n\n      return params;\n    },\n  };\n}\n\n/**\n * Creates a model that talks to GitHub Copilot using OAuth credentials.\n *\n * Copilot's `/chat/completions` endpoint is OpenAI-compatible, but GitHub Copilot\n * is not OpenAI. Use the generic OpenAI-compatible adapter with Copilot's base URL\n * instead of the OpenAI provider plus URL rewriting.\n */\nexport function githubCopilotProvider(\n  modelId: string = 'gpt-4.1',\n  options?: { headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const headers = options?.headers;\n  const copilot = createOpenAICompatible({\n    name: COPILOT_PROVIDER_ID,\n    baseURL: 'https://api.githubcopilot.com',\n    apiKey: process.env.NODE_ENV === 'test' || process.env.VITEST ? 'test-api-key' : 'oauth-placeholder',\n    headers,\n    fetch:\n      process.env.NODE_ENV === 'test' || process.env.VITEST\n        ? undefined\n        : (buildGitHubCopilotOAuthFetch({ rewriteUrl: false, authStorage: options?.authStorage }) as any),\n  });\n\n  return wrapLanguageModel({\n    model: copilot.chatModel(modelId),\n    middleware: [createCopilotMiddleware(modelId)],\n  });\n}\n\n// ---------------------------------------------------------------------------\n// Live model catalog\n// ---------------------------------------------------------------------------\n\n/**\n * Hard-coded fallback advertised when the live `/models` request fails (network\n * down, expired token, etc.). Keep this conservative because the live catalog is\n * the source of truth for the user's currently-enabled Copilot models.\n *\n * Available across all paid Copilot tiers and free of premium-request charges.\n */\nconst COPILOT_FALLBACK_MODELS: CopilotModelEntry[] = [\n  {\n    id: 'gpt-4.1',\n    name: 'GPT-4.1',\n    vendor: 'OpenAI',\n    supportedEndpoints: ['/chat/completions'],\n    isAnthropicShaped: false,\n    supportsVision: true,\n    supportsToolCalls: true,\n  },\n];\n\nconst CATALOG_TTL_MS = 10 * 60 * 1000;\nconst CATALOG_FAILURE_TTL_MS = 60 * 1000;\nconst CATALOG_FETCH_TIMEOUT_MS = 5_000;\n\ninterface CatalogCacheEntry {\n  fetchedAt: number;\n  ttl: number;\n  models: CopilotModelEntry[];\n}\n\nlet catalogCache: CatalogCacheEntry | null = null;\nlet inflightFetch: Promise<CopilotModelEntry[]> | null = null;\n\n/** Reset the in-process Copilot catalog cache (test seam, also useful after logout). */\nexport function clearCopilotCatalogCache(): void {\n  catalogCache = null;\n  inflightFetch = null;\n}\n\n/**\n * Return the user's currently-available Copilot models.\n *\n * - Returns `[]` when the user is not logged in to GitHub Copilot.\n * - Returns the cached list when a recent fetch succeeded.\n * - On the cache-miss / expired path, fetches `/models` with a 5s timeout, filters\n *   to picker-enabled and non-policy-disabled models, then caches for 10 minutes.\n * - On fetch failure, returns a small hard-coded fallback (so packs still work\n *   offline) and caches that for 1 minute to avoid hammering the API.\n *\n * Concurrent calls during a fetch share the inflight promise.\n */\nexport async function getCopilotModelCatalog(opts: { authStorage?: AuthStorage } = {}): Promise<CopilotModelEntry[]> {\n  const storage = opts.authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get(COPILOT_PROVIDER_ID);\n  if (!cred || cred.type !== 'oauth') {\n    return [];\n  }\n\n  const now = Date.now();\n  if (catalogCache && now - catalogCache.fetchedAt < catalogCache.ttl) {\n    return catalogCache.models;\n  }\n\n  if (inflightFetch) return inflightFetch;\n\n  inflightFetch = (async (): Promise<CopilotModelEntry[]> => {\n    try {\n      // getApiKey() refreshes the Copilot bearer if it has expired.\n      const accessToken = await storage.getApiKey(COPILOT_PROVIDER_ID);\n      if (!accessToken) throw new Error('No Copilot bearer token');\n      storage.reload();\n\n      const refreshed = storage.get(COPILOT_PROVIDER_ID);\n      const enterpriseUrl = (refreshed as GitHubCopilotCredentials | undefined)?.enterpriseUrl;\n      const baseUrl = getGitHubCopilotBaseUrl(accessToken, enterpriseUrl);\n\n      const controller = new AbortController();\n      const timer = setTimeout(() => controller.abort(), CATALOG_FETCH_TIMEOUT_MS);\n      try {\n        const models = await fetchCopilotModels({\n          baseUrl,\n          bearerToken: accessToken,\n          signal: controller.signal,\n        });\n        catalogCache = { fetchedAt: Date.now(), ttl: CATALOG_TTL_MS, models };\n        return models;\n      } finally {\n        clearTimeout(timer);\n      }\n    } catch (error) {\n      catalogCache = {\n        fetchedAt: Date.now(),\n        ttl: CATALOG_FAILURE_TTL_MS,\n        models: COPILOT_FALLBACK_MODELS,\n      };\n      console.warn(\n        'Failed to fetch live GitHub Copilot models, using fallback list:',\n        error instanceof Error ? error.message : error,\n      );\n      return COPILOT_FALLBACK_MODELS;\n    } finally {\n      inflightFetch = null;\n    }\n  })();\n\n  return inflightFetch;\n}\n"],"mappings":"AAaA,SAAS,8BAA8B;AAGvC,SAAS,kBAAkB,+BAA+B;AAC1D,SAAS,yBAAyB;AAElC,SAAS,iBAAiB,oBAAoB,+BAA+B;AAE7E,SAAS,mBAAmB;AAG5B,MAAM,sBAAsB;AAG5B,IAAI,sBAA0C;AAGvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAGO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAOA,SAAS,cAAc,MAAwB;AAC7C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,MAAM;AAEZ,QAAM,WAAW,IAAI;AACrB,MAAI,MAAM,QAAQ,QAAQ,KAAK,SAAS,SAAS,GAAG;AAClD,UAAM,OAAO,SAAS,SAAS,SAAS,CAAC;AACzC,QAAI,MAAM,QAAQ,KAAK,SAAS,OAAQ,QAAO;AAC/C,QAAI,MAAM,QAAQ,MAAM,OAAO,GAAG;AAEhC,YAAM,gBAAgB,KAAK,QAAQ;AAAA,QACjC,CAAC,SAAkB,QAAQ,OAAO,SAAS,YAAa,KAA2B,SAAS;AAAA,MAC9F;AACA,UAAI,cAAe,QAAO;AAAA,IAC5B;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI;AAClB,MAAI,MAAM,QAAQ,KAAK,KAAK,MAAM,SAAS,GAAG;AAC5C,UAAM,OAAO,MAAM,MAAM,SAAS,CAAC;AACnC,QAAI,MAAM,QAAQ,KAAK,SAAS,OAAQ,QAAO;AAAA,EACjD;AAEA,SAAO;AACT;AAGA,SAAS,eAAe,MAAwB;AAC9C,MAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,QAAM,MAAM;AAEZ,QAAM,YAAY,CAAC,SAA2B;AAC5C,QAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;AAC9C,UAAM,IAAK,KAA2B;AACtC,WAAO,MAAM,WAAW,MAAM,eAAe,MAAM;AAAA,EACrD;AAEA,QAAM,WAAW,IAAI;AACrB,MAAI,MAAM,QAAQ,QAAQ,GAAG;AAC3B,WAAO,SAAS;AAAA,MACd,CAAC,QACC,OACA,OAAO,QAAQ,YACf,MAAM,QAAS,IAA8B,OAAO,KAClD,IAA+B,QAAsB,KAAK,SAAS;AAAA,IACzE;AAAA,EACF;AAEA,QAAM,QAAQ,IAAI;AAClB,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM;AAAA,MACX,CAAC,SACC,QACA,OAAO,SAAS,YAChB,MAAM,QAAS,KAA+B,OAAO,KACnD,KAAgC,QAAsB,KAAK,SAAS;AAAA,IAC1E;AAAA,EACF;AAEA,SAAO;AACT;AASO,SAAS,6BACd,OAAgE,CAAC,GACnD;AACd,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,UAAU,KAAK,eAAe,eAAe;AACnD,YAAQ,OAAO;AAEf,UAAM,OAAO,QAAQ,IAAI,mBAAmB;AAC5C,QAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,YAAM,IAAI,MAAM,oDAAoD;AAAA,IACtE;AAGA,UAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;AAC/D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,8DAA8D;AAAA,IAChF;AACA,YAAQ,OAAO;AAEf,UAAM,gBAAiB,KAAkC;AAEzD,QAAI;AACJ,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,UAAI;AACF,qBAAa,KAAK,MAAM,KAAK,IAAI;AAAA,MACnC,QAAQ;AACN,qBAAa;AAAA,MACf;AAAA,IACF;AACA,UAAM,UAAU,cAAc,UAAU;AACxC,UAAM,WAAW,eAAe,UAAU;AAG1C,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,YAAM,SACJ,KAAK,mBAAmB,UACpB,KAAK,UACL,MAAM,QAAQ,KAAK,OAAO,IACxB,IAAI,QAAQ,KAAK,OAAkC,IACnD,IAAI,QAAQ,KAAK,OAAiC;AAC1D,aAAO,QAAQ,CAAC,OAAO,QAAQ;AAC7B,cAAM,QAAQ,IAAI,YAAY;AAC9B,YAAI,UAAU,mBAAmB,UAAU,aAAa;AACtD,kBAAQ,IAAI,KAAK,KAAK;AAAA,QACxB;AAAA,MACF,CAAC;AAAA,IACH;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,YAAQ,IAAI,eAAe,UAAU,UAAU,MAAM;AACrD,YAAQ,IAAI,iBAAiB,oBAAoB;AACjD,QAAI,UAAU;AACZ,cAAQ,IAAI,0BAA0B,MAAM;AAAA,IAC9C;AACA,eAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,eAAe,GAAG;AAE1D,UAAI,CAAC,QAAQ,IAAI,GAAG,GAAG;AACrB,gBAAQ,IAAI,KAAK,KAAK;AAAA,MACxB;AAAA,IACF;AAEA,UAAM,WACJ,KAAK,eAAe,QAChB,qBAAqB,KAAK,aAAa,aAAa,IACpD,eAAe,MACb,MACA,OAAO,QAAQ,WACb,IAAI,IAAI,GAAG,IACX,IAAI,IAAK,IAAgB,GAAG;AAEtC,QAAI;AACF,aAAO,MAAM,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,SAAS,SAAS;AAAA,QAChC,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,qBAAqB,KAA6B,OAAe,kBAAgC;AACxG,QAAM,WAAW,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;AACxG,QAAM,OAAO,IAAI,IAAI,wBAAwB,OAAO,gBAAgB,CAAC;AAOrE,QAAM,WAAW,SAAS,SAAS,QAAQ,eAAe,GAAG;AAC7D,SAAO,IAAI,IAAI,GAAG,QAAQ,GAAG,SAAS,MAAM,IAAI,IAAI;AACtD;AAEA,SAAS,cAAc,SAA0B;AAC/C,SAAO,QAAQ,WAAW,SAAS;AACrC;AAEA,SAAS,+BAA+B,SAAiB,OAAyB;AAChF,MAAI,CAAC,MAAM,QAAQ,KAAK,GAAG;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,IAAI,wBAAwB;AAAA,IAC9C,UAAU;AAAA,IACV;AAAA,IACA,2BAA2B;AAAA,EAC7B,CAAC;AAED,SAAO,MAAM,IAAI,UAAQ;AACvB,QAAI,CAAC,QAAQ,OAAO,SAAS,YAAa,KAA4B,SAAS,YAAY;AACzF,aAAO;AAAA,IACT;AAEA,UAAM,eAAe;AACrB,QAAI,CAAC,aAAa,aAAa;AAC7B,aAAO;AAAA,IACT;AAEA,WAAO;AAAA,MACL,GAAG;AAAA,MACH,aAAa,iBAAiB;AAAA,QAC5B,QAAQ,aAAa;AAAA,QACrB,cAAc,CAAC,WAAW;AAAA,QAC1B,MAAM;AAAA,MACR,CAAC,EAAE;AAAA,IACL;AAAA,EACF,CAAC;AACH;AAGA,SAAS,wBAAwB,SAA0C;AACzE,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AACrC,UAAI,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,MAAM;AACnE,eAAO,OAAO;AAAA,MAChB;AAEA,UAAI,cAAc,OAAO,GAAG;AAC1B,QAAC,OAA+B,QAAQ;AAAA,UACtC;AAAA,UACC,OAA+B;AAAA,QAClC;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AASO,SAAS,sBACd,UAAkB,WAClB,SACmB;AACnB,QAAM,UAAU,SAAS;AACzB,QAAM,UAAU,uBAAuB;AAAA,IACrC,MAAM;AAAA,IACN,SAAS;AAAA,IACT,QAAQ,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAAS,iBAAiB;AAAA,IACjF;AAAA,IACA,OACE,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,SAC3C,SACC,6BAA6B,EAAE,YAAY,OAAO,aAAa,SAAS,YAAY,CAAC;AAAA,EAC9F,CAAC;AAED,SAAO,kBAAkB;AAAA,IACvB,OAAO,QAAQ,UAAU,OAAO;AAAA,IAChC,YAAY,CAAC,wBAAwB,OAAO,CAAC;AAAA,EAC/C,CAAC;AACH;AAaA,MAAM,0BAA+C;AAAA,EACnD;AAAA,IACE,IAAI;AAAA,IACJ,MAAM;AAAA,IACN,QAAQ;AAAA,IACR,oBAAoB,CAAC,mBAAmB;AAAA,IACxC,mBAAmB;AAAA,IACnB,gBAAgB;AAAA,IAChB,mBAAmB;AAAA,EACrB;AACF;AAEA,MAAM,iBAAiB,KAAK,KAAK;AACjC,MAAM,yBAAyB,KAAK;AACpC,MAAM,2BAA2B;AAQjC,IAAI,eAAyC;AAC7C,IAAI,gBAAqD;AAGlD,SAAS,2BAAiC;AAC/C,iBAAe;AACf,kBAAgB;AAClB;AAcA,eAAsB,uBAAuB,OAAsC,CAAC,GAAiC;AACnH,QAAM,UAAU,KAAK,eAAe,eAAe;AACnD,UAAQ,OAAO;AAEf,QAAM,OAAO,QAAQ,IAAI,mBAAmB;AAC5C,MAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,WAAO,CAAC;AAAA,EACV;AAEA,QAAM,MAAM,KAAK,IAAI;AACrB,MAAI,gBAAgB,MAAM,aAAa,YAAY,aAAa,KAAK;AACnE,WAAO,aAAa;AAAA,EACtB;AAEA,MAAI,cAAe,QAAO;AAE1B,mBAAiB,YAA0C;AACzD,QAAI;AAEF,YAAM,cAAc,MAAM,QAAQ,UAAU,mBAAmB;AAC/D,UAAI,CAAC,YAAa,OAAM,IAAI,MAAM,yBAAyB;AAC3D,cAAQ,OAAO;AAEf,YAAM,YAAY,QAAQ,IAAI,mBAAmB;AACjD,YAAM,gBAAiB,WAAoD;AAC3E,YAAM,UAAU,wBAAwB,aAAa,aAAa;AAElE,YAAM,aAAa,IAAI,gBAAgB;AACvC,YAAM,QAAQ,WAAW,MAAM,WAAW,MAAM,GAAG,wBAAwB;AAC3E,UAAI;AACF,cAAM,SAAS,MAAM,mBAAmB;AAAA,UACtC;AAAA,UACA,aAAa;AAAA,UACb,QAAQ,WAAW;AAAA,QACrB,CAAC;AACD,uBAAe,EAAE,WAAW,KAAK,IAAI,GAAG,KAAK,gBAAgB,OAAO;AACpE,eAAO;AAAA,MACT,UAAE;AACA,qBAAa,KAAK;AAAA,MACpB;AAAA,IACF,SAAS,OAAO;AACd,qBAAe;AAAA,QACb,WAAW,KAAK,IAAI;AAAA,QACpB,KAAK;AAAA,QACL,QAAQ;AAAA,MACV;AACA,cAAQ;AAAA,QACN;AAAA,QACA,iBAAiB,QAAQ,MAAM,UAAU;AAAA,MAC3C;AACA,aAAO;AAAA,IACT,UAAE;AACA,sBAAgB;AAAA,IAClB;AAAA,EACF,GAAG;AAEH,SAAO;AACT;","names":[]}

package/dist/providers/openai-codex.d.ts

@@ -10,6 +10,7 @@
 import type { MastraModelConfig } from '@mastra/core/llm';
 import type { LanguageModelMiddleware } from 'ai';
 import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
 /**
  * Get or create the shared AuthStorage instance
  */
@@ -34,7 +35,7 @@ export declare function createCodexMiddleware(reasoningEffort?: string): Languag
  * SDK already targets the correct URL.
  */
 export declare function buildOpenAICodexOAuthFetch(opts?: {
-    authStorage?: AuthStorage;
+    authStorage?: CredentialStore;
     rewriteUrl?: boolean;
 }): typeof fetch;
 /**
@@ -66,5 +67,6 @@ export declare function buildCodexStagehandFetch(authStorage: AuthStorage): type
 export declare function openaiCodexProvider(modelId?: string, options?: {
     thinkingLevel?: ThinkingLevel;
     headers?: Record<string, string>;
+    authStorage?: CredentialStore;
 }): MastraModelConfig;
 //# sourceMappingURL=openai-codex.d.ts.map

package/dist/providers/openai-codex.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUjD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAIxE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAO9F;AAID,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAMxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAqCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,WAAW,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GAC7D,OAAO,KAAK,CAyDd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAgC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GAC5E,iBAAiB,CAmCnB"}
+{"version":3,"file":"openai-codex.d.ts","sourceRoot":"","sources":["../../src/providers/openai-codex.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,IAAI,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAUxD;;GAEG;AACH,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAOD,mCAAmC;AACnC,MAAM,MAAM,aAAa,GAAG,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,OAAO,CAAC;AAIxE,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,aAAa,CAO9F;AAID,eAAO,MAAM,kCAAkC,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,CAMxF,CAAC;AAEF;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4BvF;AAqCD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAO,GACjE,OAAO,KAAK,CAyDd;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,KAAK,CAgC/E;AAwID;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,GAAE,MAA4B,EACrC,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC3G,iBAAiB,CAmCnB"}

package/dist/providers/openai-codex.js

@@ -271,7 +271,7 @@ function openaiCodexProvider(modelId = "codex-mini-latest", options) {
     apiKey: "oauth-dummy-key",
     baseURL,
     headers,
-    fetch: buildOpenAICodexOAuthFetch()
+    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage })
   });
   return wrapLanguageModel({
     model: openai.responses(modelId),

package/dist/providers/openai-codex.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\n/** Valid thinking level values. */\nexport type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning).\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: AuthStorage,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new Error('Not logged in to OpenAI Codex. Run /login first.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new Error('Failed to refresh OpenAI Codex token. Please /login again.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: AuthStorage; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string> },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch() as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":"AAUA,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAElC,SAAS,mBAAmB;AAG5B,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;AAKvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAKO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;AAAA;AAAA;AAO3B,MAAM,gBAAgB;AAEf,SAAS,0BAA0B,SAAiB,OAAqC;AAE9F,MAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAAO;AAClD,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAIO,MAAM,qCAAgF;AAAA,EAC3F,KAAK;AAAA,EACL,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,OAAO;AACT;AAKO,SAAS,sBAAsB,iBAAmD;AACvF,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AAErC,UAAI,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,MAAM;AACnE,eAAO,OAAO;AAAA,MAChB;AAIA,aAAO,kBAAkB;AAAA,QACvB,GAAG,OAAO;AAAA,QACV,QAAQ;AAAA,UACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;AAAA,UACvC,cAAc;AAAA;AAAA,UAEd,OAAO;AAAA;AAAA;AAAA;AAAA,UAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,QAC/C;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaA,eAAe,eACb,aACiE;AACjE,QAAM,UAAU,eAAe,eAAe;AAC9C,UAAQ,OAAO;AAEf,QAAM,OAAO,QAAQ,IAAI,cAAc;AACvC,MAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,MAAI,cAAc,KAAK;AACvB,MAAI,KAAK,IAAI,KAAK,KAAK,SAAS;AAC9B,UAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;AAC7D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,kBAAc;AACd,YAAQ,OAAO;AAAA,EACjB;AAEA,SAAO,EAAE,aAAa,WAAY,KAAa,UAAgC;AACjF;AASO,SAAS,2BACd,OAA4D,CAAC,GAC/C;AACd,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,EAAE,aAAa,UAAU,IAAI,MAAM,eAAe,KAAK,WAAW;AAGxE,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,UAAI,KAAK,mBAAmB,SAAS;AACnC,aAAK,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACnC,cAAI,IAAI,YAAY,MAAM,iBAAiB;AACzC,oBAAQ,IAAI,KAAK,KAAK;AAAA,UACxB;AAAA,QACF,CAAC;AAAA,MACH,WAAW,MAAM,QAAQ,KAAK,OAAO,GAAG;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,cAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,QAAW;AACjE,oBAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;AAAA,UACjC;AAAA,QACF;AAAA,MACF,OAAO;AACL,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AACvD,cAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,QAAW;AAChE,oBAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,WAAW;AACb,cAAQ,IAAI,sBAAsB,SAAS;AAAA,IAC7C;AAGA,UAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;AACtG,UAAM,gBACJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB;AAC5F,UAAM,WAAW,gBAAgB,IAAI,IAAI,kBAAkB,IAAI;AAE/D,QAAI;AACF,aAAO,MAAM,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,SAAS,SAAS;AAAA,QAChC,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAoBO,SAAS,yBAAyB,aAAwC;AAC/E,UAAQ,OAAO,KAA6B,SAAuC;AAEjF,UAAM,EAAE,YAAY,IAAI,MAAM,eAAe,WAAW;AACxD,UAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,YAAQ,IAAI,UAAU,mBAAmB;AAIzC,QAAI,OAA8B,MAAM;AACxC,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK,IAAI;AACnC,eAAO,SAAS;AAChB,eAAO,KAAK,UAAU,MAAM;AAC5B,YAAI,CAAC,QAAQ,IAAI,cAAc,EAAG,SAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAClF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,SAAS,KAAK,CAAC;AAC5D,QAAI,CAAC,SAAS,GAAI,QAAO;AAGzB,UAAM,aAAa,MAAM,qBAAqB,QAAQ;AACtD,WAAO,IAAI,SAAS,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAgBA,eAAe,qBAAqB,UAAqC;AACvE,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,MAAI,SAAS;AAEb,MAAI,gBAAqB;AACzB,MAAI,kBAAuB;AAE3B,QAAM,QAAQ,oBAAI,IAAiB;AAEnC,QAAM,cAAc,oBAAI,IAAoB;AAE5C,QAAM,cAAc,CAAC,UAA6C;AAChE,QAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,SAAU;AAC5C,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,MAAM,IAAI;AAAA,IACjC,QAAQ;AACN;AAAA,IACF;AACA,UAAM,OAAe,QAAQ,QAAQ,MAAM,SAAS;AAEpD,YAAQ,MAAM;AAAA,MACZ,KAAK,oBAAoB;AACvB,0BAAkB,QAAQ,YAAY;AACtC;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,6BAA6B;AAChC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,cAAM,MAAM,GAAG,QAAQ,YAAY,IAAI,QAAQ,iBAAiB,CAAC;AACjE,oBAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;AACzE;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,wBAAgB,QAAQ,YAAY;AACpC;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,SAAS;AACZ,cAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,CAAC,EAAE;AAAA,MACnF;AAAA,MACA;AAEE;AAAA,IACJ;AAAA,EACF;AAIA,QAAM,eAAe,CAAC,UAAkB;AACtC,cAAU,MAAM,QAAQ,SAAS,IAAI;AACrC,QAAI;AACJ,YAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;AAC/C,YAAM,MAAM,OAAO,MAAM,GAAG,MAAM;AAClC,eAAS,OAAO,MAAM,SAAS,CAAC;AAChC,YAAM,QAA2C,CAAC;AAClD,YAAM,YAAsB,CAAC;AAC7B,iBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,gBAAM,QAAQ,KAAK,MAAM,CAAC,EAAE,KAAK;AAAA,QACnC,WAAW,KAAK,WAAW,OAAO,GAAG;AACnC,oBAAU,KAAK,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC;AAAA,QAC1C;AAAA,MACF;AACA,UAAI,UAAU,SAAS,GAAG;AACxB,cAAM,OAAO,UAAU,KAAK,IAAI;AAAA,MAClC;AACA,kBAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,mBAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,IACtD;AACA,iBAAa,QAAQ,OAAO,CAAC;AAAA,EAC/B,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAGA,QAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;AAC9D,QAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,EAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACxB,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM;AAEtB,QAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GAAG;AAC3D,WAAK,UAAU,KAAK,QAAQ,IAAI,CAAC,GAAQ,OAAe;AACtD,cAAM,MAAM,GAAG,KAAK,IAAI,EAAE;AAC1B,YAAI,YAAY,IAAI,GAAG,GAAG;AACxB,iBAAO,EAAE,GAAG,GAAG,MAAM,YAAY,IAAI,GAAG,EAAE;AAAA,QAC5C;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT,CAAC;AAEH,OAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;AAEpE,SAAO,KAAK,UAAU,IAAI;AAC5B;AASO,SAAS,oBACd,UAAkB,qBAClB,SACmB;AACnB,QAAM,iBAAgC,SAAS,iBAAiB;AAChE,QAAM,iBAAiB,0BAA0B,SAAS,cAAc;AACxE,QAAM,kBAAkB,mCAAmC,cAAc;AACzE,QAAM,aAAa,sBAAsB,eAAe;AACxD,QAAM,UAAU,SAAS;AAEzB,QAAM,UAAU,QAAQ,IAAI;AAG5B,MAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;AACzD,UAAMA,UAAS,aAAa;AAAA,MAC1B,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,kBAAkB;AAAA,MACvB,OAAOA,QAAO,UAAU,OAAO;AAAA,MAC/B,YAAY,CAAC,UAAU;AAAA,IACzB,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,aAAa;AAAA,IAC1B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO,2BAA2B;AAAA,EACpC,CAAC;AAID,SAAO,kBAAkB;AAAA,IACvB,OAAO,OAAO,UAAU,OAAO;AAAA,IAC/B,YAAY,CAAC,UAAU;AAAA,EACzB,CAAC;AACH;","names":["openai"]}
+{"version":3,"sources":["../../src/providers/openai-codex.ts"],"sourcesContent":["/**\n * OpenAI Codex OAuth Provider\n *\n * Uses OAuth tokens from AuthStorage to authenticate with ChatGPT Plus/Pro subscription.\n * This allows access to OpenAI models through the ChatGPT OAuth flow.\n *\n * Inspired by opencode's Codex plugin implementation:\n * https://github.com/sst/opencode/blob/main/packages/opencode/src/plugin/codex.ts\n */\n\nimport { createOpenAI } from '@ai-sdk/openai';\nimport type { MastraModelConfig } from '@mastra/core/llm';\nimport { wrapLanguageModel } from 'ai';\nimport type { LanguageModelMiddleware } from 'ai';\nimport { AuthStorage } from '../auth/storage.js';\nimport type { CredentialStore } from '../auth/types.js';\n\n// Codex API endpoint (not standard OpenAI API)\nconst CODEX_API_ENDPOINT = 'https://chatgpt.com/backend-api/codex/responses';\nconst CODEX_ORIGINATOR = 'mastracode';\nconst CODEX_USER_AGENT = 'mastracode';\n\n// Singleton auth storage instance (shared with claude-max.ts)\nlet authStorageInstance: AuthStorage | null = null;\n\n/**\n * Get or create the shared AuthStorage instance\n */\nexport function getAuthStorage(): AuthStorage {\n  if (!authStorageInstance) {\n    authStorageInstance = new AuthStorage();\n  }\n  return authStorageInstance;\n}\n\n/**\n * Set a custom AuthStorage instance (useful for TUI integration)\n */\nexport function setAuthStorage(storage: AuthStorage | undefined): void {\n  authStorageInstance = storage ?? null;\n}\n\n// Default instructions for Codex API (required)\nconst CODEX_INSTRUCTIONS = `You are an interactive CLI tool that helps users with software engineering tasks. Use the instructions below and the tools available to you to assist the user.\n\nIMPORTANT: You should be concise, direct, and helpful. Focus on solving the user's problem efficiently.`;\n\n/** Valid thinking level values. */\nexport type ThinkingLevel = 'off' | 'low' | 'medium' | 'high' | 'xhigh';\n\nconst GPT5_MODEL_RE = /^gpt-5(?:\\.|-|$)/;\n\nexport function getEffectiveThinkingLevel(modelId: string, level: ThinkingLevel): ThinkingLevel {\n  // GPT-5.* models on Codex require at least low reasoning.\n  if (GPT5_MODEL_RE.test(modelId) && level === 'off') {\n    return 'low';\n  }\n\n  return level;\n}\n\n// Map thinkingLevel state values to OpenAI reasoningEffort values.\n// undefined means omit the parameter (no reasoning).\nexport const THINKING_LEVEL_TO_REASONING_EFFORT: Record<ThinkingLevel, string | undefined> = {\n  off: undefined,\n  low: 'low',\n  medium: 'medium',\n  high: 'high',\n  xhigh: 'xhigh',\n};\n\n/**\n * Create Codex middleware with the given reasoning effort level.\n */\nexport function createCodexMiddleware(reasoningEffort?: string): LanguageModelMiddleware {\n  return {\n    specificationVersion: 'v3',\n    transformParams: async ({ params }) => {\n      // Remove topP if temperature is set (OpenAI doesn't like both)\n      if (params.temperature !== undefined && params.temperature !== null) {\n        delete params.topP;\n      }\n\n      // Codex API requires specific settings via providerOptions\n      // Use type assertion to satisfy JSONValue constraints\n      params.providerOptions = {\n        ...params.providerOptions,\n        openai: {\n          ...(params.providerOptions?.openai ?? {}),\n          instructions: CODEX_INSTRUCTIONS,\n          // Codex API requires store to be false\n          store: false,\n          // Enable reasoning for Codex models — without this, the model\n          // skips the reasoning/action phase and goes straight to final_answer,\n          // resulting in narration instead of tool calls.\n          ...(reasoningEffort ? { reasoningEffort } : {}),\n        },\n      } as typeof params.providerOptions;\n\n      return params;\n    },\n  };\n}\n\n/**\n * Get a live OAuth bearer token for the Codex OAuth credential.\n *\n * Refreshes the token if it's expired, and returns the credential's\n * accountId alongside the access token. Throws if the user isn't logged in\n * or if the refresh fails.\n *\n * This is the only piece of Codex auth that is genuinely shared between\n * the main agent's fetch (`buildOpenAICodexOAuthFetch`) and the Stagehand\n * fetch (`buildCodexStagehandFetch`).\n */\nasync function getCodexBearer(\n  authStorage?: CredentialStore,\n): Promise<{ accessToken: string; accountId: string | undefined }> {\n  const storage = authStorage ?? getAuthStorage();\n  storage.reload();\n\n  const cred = storage.get('openai-codex');\n  if (!cred || cred.type !== 'oauth') {\n    throw new Error('Not logged in to OpenAI Codex. Run /login first.');\n  }\n\n  let accessToken = cred.access;\n  if (Date.now() >= cred.expires) {\n    const refreshedToken = await storage.getApiKey('openai-codex');\n    if (!refreshedToken) {\n      throw new Error('Failed to refresh OpenAI Codex token. Please /login again.');\n    }\n    accessToken = refreshedToken;\n    storage.reload();\n  }\n\n  return { accessToken, accountId: (cred as any).accountId as string | undefined };\n}\n\n/**\n * Build a fetch function that handles OpenAI Codex OAuth.\n * Preserves non-authorization headers from init.\n * When rewriteUrl is true (default), rewrites /v1/responses and /chat/completions\n * to the Codex API endpoint. Set rewriteUrl: false for gateway usage where the\n * SDK already targets the correct URL.\n */\nexport function buildOpenAICodexOAuthFetch(\n  opts: { authStorage?: CredentialStore; rewriteUrl?: boolean } = {},\n): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    const { accessToken, accountId } = await getCodexBearer(opts.authStorage);\n\n    // Preserve non-authorization headers\n    const headers = new Headers();\n    if (init?.headers) {\n      if (init.headers instanceof Headers) {\n        init.headers.forEach((value, key) => {\n          if (key.toLowerCase() !== 'authorization') {\n            headers.set(key, value);\n          }\n        });\n      } else if (Array.isArray(init.headers)) {\n        for (const [key, value] of init.headers) {\n          if (key!.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key!, String(value));\n          }\n        }\n      } else {\n        for (const [key, value] of Object.entries(init.headers)) {\n          if (key.toLowerCase() !== 'authorization' && value !== undefined) {\n            headers.set(key, String(value));\n          }\n        }\n      }\n    }\n\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    if (!headers.has('originator')) {\n      headers.set('originator', CODEX_ORIGINATOR);\n    }\n    if (!headers.has('User-Agent')) {\n      headers.set('User-Agent', CODEX_USER_AGENT);\n    }\n    if (accountId) {\n      headers.set('ChatGPT-Account-ID', accountId);\n    }\n\n    // URL rewriting — only when rewriteUrl !== false\n    const parsed = url instanceof URL ? url : new URL(typeof url === 'string' ? url : (url as Request).url);\n    const shouldRewrite =\n      opts.rewriteUrl !== false &&\n      (parsed.pathname.includes('/v1/responses') || parsed.pathname.includes('/chat/completions'));\n    const finalUrl = shouldRewrite ? new URL(CODEX_API_ENDPOINT) : parsed;\n\n    try {\n      return await fetch(finalUrl, { ...init, headers });\n    } catch (error) {\n      if (error && typeof error === 'object') {\n        Object.assign(error as Record<string, unknown>, {\n          requestUrl: finalUrl.toString(),\n        });\n      }\n      throw error;\n    }\n  }) as typeof fetch;\n}\n\n/**\n * Build a fetch function for Stagehand-on-Codex.\n *\n * The Codex backend has two requirements that AI SDK's non-streaming\n * `generateText` path doesn't naturally satisfy:\n *\n *   1. `stream: true` must be set on every request body.\n *   2. The response is delivered as Server-Sent Events; AI SDK's\n *      non-streaming code path expects a single JSON body.\n *\n * This fetch forces streaming on the outgoing request, collects the SSE\n * events, and synthesizes the non-streaming JSON shape that\n * `@ai-sdk/openai`'s Responses API parser expects.\n *\n * Headers, OAuth refresh, and URL targeting are handled by the caller via\n * `baseURL` / `headers` on the AI SDK provider; this fetch only injects the\n * live OAuth bearer per call.\n */\nexport function buildCodexStagehandFetch(authStorage: AuthStorage): typeof fetch {\n  return (async (url: string | URL | Request, init?: Parameters<typeof fetch>[1]) => {\n    // Refresh + inject the OAuth bearer per call\n    const { accessToken } = await getCodexBearer(authStorage);\n    const headers = new Headers(init?.headers);\n    headers.set('Authorization', `Bearer ${accessToken}`);\n    headers.set('Accept', 'text/event-stream');\n\n    // Force stream: true on the request body\n    type FetchBody = NonNullable<Parameters<typeof fetch>[1]>['body'];\n    let body: FetchBody | undefined = init?.body;\n    if (typeof init?.body === 'string') {\n      try {\n        const parsed = JSON.parse(init.body) as Record<string, unknown>;\n        parsed.stream = true;\n        body = JSON.stringify(parsed);\n        if (!headers.has('content-type')) headers.set('content-type', 'application/json');\n      } catch {\n        // Not JSON; leave as-is\n      }\n    }\n\n    const upstream = await fetch(url, { ...init, headers, body });\n    if (!upstream.ok) return upstream;\n\n    // Aggregate SSE -> synthesized non-streaming Response\n    const aggregated = await aggregateCodexStream(upstream);\n    return new Response(aggregated, {\n      status: 200,\n      headers: { 'content-type': 'application/json' },\n    });\n  }) as typeof fetch;\n}\n\n/**\n * Read an SSE Response and reduce it to a single JSON string matching the\n * non-streaming OpenAI Responses-API shape.\n *\n * Event vocabulary we care about (per OpenAI Responses API streaming):\n *   - response.created         → carries `response` object (id, model, usage stub)\n *   - response.output_item.added/done → output items (message, reasoning, etc.)\n *   - response.output_text.delta → text chunks\n *   - response.completed       → final `response` snapshot incl. usage\n *   - response.error / error   → bubble up as a thrown body\n *\n * Reasoning events (`response.reasoning_summary.*`) are intentionally ignored\n * for the non-streaming text response.\n */\nasync function aggregateCodexStream(response: Response): Promise<string> {\n  if (!response.body) {\n    throw new Error('Codex streaming response had no body');\n  }\n\n  const reader = response.body.getReader();\n  const decoder = new TextDecoder('utf-8');\n  let buffer = '';\n\n  let finalResponse: any = null;\n  let createdResponse: any = null;\n  // Track output_items by index so we can rebuild the final array\n  const items = new Map<number, any>();\n  // Accumulate output_text deltas keyed by item_index + content_index\n  const textBuffers = new Map<string, string>();\n\n  const handleEvent = (event: { event?: string; data?: string }) => {\n    if (!event.data || event.data === '[DONE]') return;\n    let payload: any;\n    try {\n      payload = JSON.parse(event.data);\n    } catch {\n      return;\n    }\n    const type: string = payload.type ?? event.event ?? '';\n\n    switch (type) {\n      case 'response.created': {\n        createdResponse = payload.response ?? createdResponse;\n        break;\n      }\n      case 'response.output_item.added': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_item.done': {\n        if (typeof payload.output_index === 'number' && payload.item) {\n          items.set(payload.output_index, payload.item);\n        }\n        break;\n      }\n      case 'response.output_text.delta': {\n        const key = `${payload.output_index}:${payload.content_index ?? 0}`;\n        textBuffers.set(key, (textBuffers.get(key) ?? '') + (payload.delta ?? ''));\n        break;\n      }\n      case 'response.completed': {\n        finalResponse = payload.response ?? finalResponse;\n        break;\n      }\n      case 'response.error':\n      case 'error': {\n        throw new Error(`Codex stream error: ${JSON.stringify(payload.error ?? payload)}`);\n      }\n      default:\n        // Ignore reasoning / unknown events\n        break;\n    }\n  };\n\n  // SSE parser: events separated by blank line; lines like \"event: x\" / \"data: y\"\n  // Normalize CRLF→LF so \\r\\n\\r\\n event boundaries parse correctly (SSE spec allows CRLF).\n  const processChunk = (chunk: string) => {\n    buffer += chunk.replace(/\\r\\n/g, '\\n');\n    let sepIdx: number;\n    while ((sepIdx = buffer.indexOf('\\n\\n')) !== -1) {\n      const raw = buffer.slice(0, sepIdx);\n      buffer = buffer.slice(sepIdx + 2);\n      const event: { event?: string; data?: string } = {};\n      const dataLines: string[] = [];\n      for (const line of raw.split('\\n')) {\n        if (line.startsWith('event:')) {\n          event.event = line.slice(6).trim();\n        } else if (line.startsWith('data:')) {\n          dataLines.push(line.slice(5).trimStart());\n        }\n      }\n      if (dataLines.length > 0) {\n        event.data = dataLines.join('\\n');\n      }\n      handleEvent(event);\n    }\n  };\n\n  try {\n    while (true) {\n      const { value, done } = await reader.read();\n      if (done) break;\n      processChunk(decoder.decode(value, { stream: true }));\n    }\n    processChunk(decoder.decode());\n  } finally {\n    reader.releaseLock();\n  }\n\n  // Stitch accumulated text deltas back into their items\n  const base = finalResponse ?? createdResponse ?? { output: [] };\n  const finalItems = Array.from(items.entries())\n    .sort(([a], [b]) => a - b)\n    .map(([index, item]) => {\n      // Patch message-type items' content text using buffered deltas\n      if (item?.type === 'message' && Array.isArray(item.content)) {\n        item.content = item.content.map((c: any, ci: number) => {\n          const key = `${index}:${ci}`;\n          if (textBuffers.has(key)) {\n            return { ...c, text: textBuffers.get(key) };\n          }\n          return c;\n        });\n      }\n      return item;\n    });\n\n  base.output = finalItems.length > 0 ? finalItems : (base.output ?? []);\n\n  return JSON.stringify(base);\n}\n\n/**\n * Creates an OpenAI model using ChatGPT OAuth authentication\n * Uses OAuth tokens from AuthStorage (auto-refreshes when needed)\n *\n * IMPORTANT: This uses the Codex API endpoint, not the standard OpenAI API.\n * URLs are rewritten from /v1/responses or /chat/completions to the Codex endpoint.\n */\nexport function openaiCodexProvider(\n  modelId: string = 'codex-mini-latest',\n  options?: { thinkingLevel?: ThinkingLevel; headers?: Record<string, string>; authStorage?: CredentialStore },\n): MastraModelConfig {\n  const requestedLevel: ThinkingLevel = options?.thinkingLevel ?? 'medium';\n  const effectiveLevel = getEffectiveThinkingLevel(modelId, requestedLevel);\n  const reasoningEffort = THINKING_LEVEL_TO_REASONING_EFFORT[effectiveLevel];\n  const middleware = createCodexMiddleware(reasoningEffort);\n  const headers = options?.headers;\n\n  const baseURL = process.env.OPENAI_BASE_URL;\n\n  // Test environment: use API key\n  if (process.env.NODE_ENV === 'test' || process.env.VITEST) {\n    const openai = createOpenAI({\n      apiKey: 'test-api-key',\n      baseURL,\n      headers,\n    });\n    return wrapLanguageModel({\n      model: openai.responses(modelId),\n      middleware: [middleware],\n    });\n  }\n\n  const openai = createOpenAI({\n    apiKey: 'oauth-dummy-key',\n    baseURL,\n    headers,\n    fetch: buildOpenAICodexOAuthFetch({ authStorage: options?.authStorage }) as any,\n  });\n\n  // Use the responses API for Codex models\n  // Wrap with middleware\n  return wrapLanguageModel({\n    model: openai.responses(modelId),\n    middleware: [middleware],\n  });\n}\n"],"mappings":"AAUA,SAAS,oBAAoB;AAE7B,SAAS,yBAAyB;AAElC,SAAS,mBAAmB;AAI5B,MAAM,qBAAqB;AAC3B,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAGzB,IAAI,sBAA0C;AAKvC,SAAS,iBAA8B;AAC5C,MAAI,CAAC,qBAAqB;AACxB,0BAAsB,IAAI,YAAY;AAAA,EACxC;AACA,SAAO;AACT;AAKO,SAAS,eAAe,SAAwC;AACrE,wBAAsB,WAAW;AACnC;AAGA,MAAM,qBAAqB;AAAA;AAAA;AAO3B,MAAM,gBAAgB;AAEf,SAAS,0BAA0B,SAAiB,OAAqC;AAE9F,MAAI,cAAc,KAAK,OAAO,KAAK,UAAU,OAAO;AAClD,WAAO;AAAA,EACT;AAEA,SAAO;AACT;AAIO,MAAM,qCAAgF;AAAA,EAC3F,KAAK;AAAA,EACL,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,OAAO;AACT;AAKO,SAAS,sBAAsB,iBAAmD;AACvF,SAAO;AAAA,IACL,sBAAsB;AAAA,IACtB,iBAAiB,OAAO,EAAE,OAAO,MAAM;AAErC,UAAI,OAAO,gBAAgB,UAAa,OAAO,gBAAgB,MAAM;AACnE,eAAO,OAAO;AAAA,MAChB;AAIA,aAAO,kBAAkB;AAAA,QACvB,GAAG,OAAO;AAAA,QACV,QAAQ;AAAA,UACN,GAAI,OAAO,iBAAiB,UAAU,CAAC;AAAA,UACvC,cAAc;AAAA;AAAA,UAEd,OAAO;AAAA;AAAA;AAAA;AAAA,UAIP,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;AAAA,QAC/C;AAAA,MACF;AAEA,aAAO;AAAA,IACT;AAAA,EACF;AACF;AAaA,eAAe,eACb,aACiE;AACjE,QAAM,UAAU,eAAe,eAAe;AAC9C,UAAQ,OAAO;AAEf,QAAM,OAAO,QAAQ,IAAI,cAAc;AACvC,MAAI,CAAC,QAAQ,KAAK,SAAS,SAAS;AAClC,UAAM,IAAI,MAAM,kDAAkD;AAAA,EACpE;AAEA,MAAI,cAAc,KAAK;AACvB,MAAI,KAAK,IAAI,KAAK,KAAK,SAAS;AAC9B,UAAM,iBAAiB,MAAM,QAAQ,UAAU,cAAc;AAC7D,QAAI,CAAC,gBAAgB;AACnB,YAAM,IAAI,MAAM,4DAA4D;AAAA,IAC9E;AACA,kBAAc;AACd,YAAQ,OAAO;AAAA,EACjB;AAEA,SAAO,EAAE,aAAa,WAAY,KAAa,UAAgC;AACjF;AASO,SAAS,2BACd,OAAgE,CAAC,GACnD;AACd,UAAQ,OAAO,KAA6B,SAAuC;AACjF,UAAM,EAAE,aAAa,UAAU,IAAI,MAAM,eAAe,KAAK,WAAW;AAGxE,UAAM,UAAU,IAAI,QAAQ;AAC5B,QAAI,MAAM,SAAS;AACjB,UAAI,KAAK,mBAAmB,SAAS;AACnC,aAAK,QAAQ,QAAQ,CAAC,OAAO,QAAQ;AACnC,cAAI,IAAI,YAAY,MAAM,iBAAiB;AACzC,oBAAQ,IAAI,KAAK,KAAK;AAAA,UACxB;AAAA,QACF,CAAC;AAAA,MACH,WAAW,MAAM,QAAQ,KAAK,OAAO,GAAG;AACtC,mBAAW,CAAC,KAAK,KAAK,KAAK,KAAK,SAAS;AACvC,cAAI,IAAK,YAAY,MAAM,mBAAmB,UAAU,QAAW;AACjE,oBAAQ,IAAI,KAAM,OAAO,KAAK,CAAC;AAAA,UACjC;AAAA,QACF;AAAA,MACF,OAAO;AACL,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,OAAO,GAAG;AACvD,cAAI,IAAI,YAAY,MAAM,mBAAmB,UAAU,QAAW;AAChE,oBAAQ,IAAI,KAAK,OAAO,KAAK,CAAC;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,CAAC,QAAQ,IAAI,YAAY,GAAG;AAC9B,cAAQ,IAAI,cAAc,gBAAgB;AAAA,IAC5C;AACA,QAAI,WAAW;AACb,cAAQ,IAAI,sBAAsB,SAAS;AAAA,IAC7C;AAGA,UAAM,SAAS,eAAe,MAAM,MAAM,IAAI,IAAI,OAAO,QAAQ,WAAW,MAAO,IAAgB,GAAG;AACtG,UAAM,gBACJ,KAAK,eAAe,UACnB,OAAO,SAAS,SAAS,eAAe,KAAK,OAAO,SAAS,SAAS,mBAAmB;AAC5F,UAAM,WAAW,gBAAgB,IAAI,IAAI,kBAAkB,IAAI;AAE/D,QAAI;AACF,aAAO,MAAM,MAAM,UAAU,EAAE,GAAG,MAAM,QAAQ,CAAC;AAAA,IACnD,SAAS,OAAO;AACd,UAAI,SAAS,OAAO,UAAU,UAAU;AACtC,eAAO,OAAO,OAAkC;AAAA,UAC9C,YAAY,SAAS,SAAS;AAAA,QAChC,CAAC;AAAA,MACH;AACA,YAAM;AAAA,IACR;AAAA,EACF;AACF;AAoBO,SAAS,yBAAyB,aAAwC;AAC/E,UAAQ,OAAO,KAA6B,SAAuC;AAEjF,UAAM,EAAE,YAAY,IAAI,MAAM,eAAe,WAAW;AACxD,UAAM,UAAU,IAAI,QAAQ,MAAM,OAAO;AACzC,YAAQ,IAAI,iBAAiB,UAAU,WAAW,EAAE;AACpD,YAAQ,IAAI,UAAU,mBAAmB;AAIzC,QAAI,OAA8B,MAAM;AACxC,QAAI,OAAO,MAAM,SAAS,UAAU;AAClC,UAAI;AACF,cAAM,SAAS,KAAK,MAAM,KAAK,IAAI;AACnC,eAAO,SAAS;AAChB,eAAO,KAAK,UAAU,MAAM;AAC5B,YAAI,CAAC,QAAQ,IAAI,cAAc,EAAG,SAAQ,IAAI,gBAAgB,kBAAkB;AAAA,MAClF,QAAQ;AAAA,MAER;AAAA,IACF;AAEA,UAAM,WAAW,MAAM,MAAM,KAAK,EAAE,GAAG,MAAM,SAAS,KAAK,CAAC;AAC5D,QAAI,CAAC,SAAS,GAAI,QAAO;AAGzB,UAAM,aAAa,MAAM,qBAAqB,QAAQ;AACtD,WAAO,IAAI,SAAS,YAAY;AAAA,MAC9B,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAmB;AAAA,IAChD,CAAC;AAAA,EACH;AACF;AAgBA,eAAe,qBAAqB,UAAqC;AACvE,MAAI,CAAC,SAAS,MAAM;AAClB,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AAEA,QAAM,SAAS,SAAS,KAAK,UAAU;AACvC,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,MAAI,SAAS;AAEb,MAAI,gBAAqB;AACzB,MAAI,kBAAuB;AAE3B,QAAM,QAAQ,oBAAI,IAAiB;AAEnC,QAAM,cAAc,oBAAI,IAAoB;AAE5C,QAAM,cAAc,CAAC,UAA6C;AAChE,QAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,SAAU;AAC5C,QAAI;AACJ,QAAI;AACF,gBAAU,KAAK,MAAM,MAAM,IAAI;AAAA,IACjC,QAAQ;AACN;AAAA,IACF;AACA,UAAM,OAAe,QAAQ,QAAQ,MAAM,SAAS;AAEpD,YAAQ,MAAM;AAAA,MACZ,KAAK,oBAAoB;AACvB,0BAAkB,QAAQ,YAAY;AACtC;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,6BAA6B;AAChC,YAAI,OAAO,QAAQ,iBAAiB,YAAY,QAAQ,MAAM;AAC5D,gBAAM,IAAI,QAAQ,cAAc,QAAQ,IAAI;AAAA,QAC9C;AACA;AAAA,MACF;AAAA,MACA,KAAK,8BAA8B;AACjC,cAAM,MAAM,GAAG,QAAQ,YAAY,IAAI,QAAQ,iBAAiB,CAAC;AACjE,oBAAY,IAAI,MAAM,YAAY,IAAI,GAAG,KAAK,OAAO,QAAQ,SAAS,GAAG;AACzE;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,wBAAgB,QAAQ,YAAY;AACpC;AAAA,MACF;AAAA,MACA,KAAK;AAAA,MACL,KAAK,SAAS;AACZ,cAAM,IAAI,MAAM,uBAAuB,KAAK,UAAU,QAAQ,SAAS,OAAO,CAAC,EAAE;AAAA,MACnF;AAAA,MACA;AAEE;AAAA,IACJ;AAAA,EACF;AAIA,QAAM,eAAe,CAAC,UAAkB;AACtC,cAAU,MAAM,QAAQ,SAAS,IAAI;AACrC,QAAI;AACJ,YAAQ,SAAS,OAAO,QAAQ,MAAM,OAAO,IAAI;AAC/C,YAAM,MAAM,OAAO,MAAM,GAAG,MAAM;AAClC,eAAS,OAAO,MAAM,SAAS,CAAC;AAChC,YAAM,QAA2C,CAAC;AAClD,YAAM,YAAsB,CAAC;AAC7B,iBAAW,QAAQ,IAAI,MAAM,IAAI,GAAG;AAClC,YAAI,KAAK,WAAW,QAAQ,GAAG;AAC7B,gBAAM,QAAQ,KAAK,MAAM,CAAC,EAAE,KAAK;AAAA,QACnC,WAAW,KAAK,WAAW,OAAO,GAAG;AACnC,oBAAU,KAAK,KAAK,MAAM,CAAC,EAAE,UAAU,CAAC;AAAA,QAC1C;AAAA,MACF;AACA,UAAI,UAAU,SAAS,GAAG;AACxB,cAAM,OAAO,UAAU,KAAK,IAAI;AAAA,MAClC;AACA,kBAAY,KAAK;AAAA,IACnB;AAAA,EACF;AAEA,MAAI;AACF,WAAO,MAAM;AACX,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,OAAO,KAAK;AAC1C,UAAI,KAAM;AACV,mBAAa,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC,CAAC;AAAA,IACtD;AACA,iBAAa,QAAQ,OAAO,CAAC;AAAA,EAC/B,UAAE;AACA,WAAO,YAAY;AAAA,EACrB;AAGA,QAAM,OAAO,iBAAiB,mBAAmB,EAAE,QAAQ,CAAC,EAAE;AAC9D,QAAM,aAAa,MAAM,KAAK,MAAM,QAAQ,CAAC,EAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,EACxB,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM;AAEtB,QAAI,MAAM,SAAS,aAAa,MAAM,QAAQ,KAAK,OAAO,GAAG;AAC3D,WAAK,UAAU,KAAK,QAAQ,IAAI,CAAC,GAAQ,OAAe;AACtD,cAAM,MAAM,GAAG,KAAK,IAAI,EAAE;AAC1B,YAAI,YAAY,IAAI,GAAG,GAAG;AACxB,iBAAO,EAAE,GAAG,GAAG,MAAM,YAAY,IAAI,GAAG,EAAE;AAAA,QAC5C;AACA,eAAO;AAAA,MACT,CAAC;AAAA,IACH;AACA,WAAO;AAAA,EACT,CAAC;AAEH,OAAK,SAAS,WAAW,SAAS,IAAI,aAAc,KAAK,UAAU,CAAC;AAEpE,SAAO,KAAK,UAAU,IAAI;AAC5B;AASO,SAAS,oBACd,UAAkB,qBAClB,SACmB;AACnB,QAAM,iBAAgC,SAAS,iBAAiB;AAChE,QAAM,iBAAiB,0BAA0B,SAAS,cAAc;AACxE,QAAM,kBAAkB,mCAAmC,cAAc;AACzE,QAAM,aAAa,sBAAsB,eAAe;AACxD,QAAM,UAAU,SAAS;AAEzB,QAAM,UAAU,QAAQ,IAAI;AAG5B,MAAI,QAAQ,IAAI,aAAa,UAAU,QAAQ,IAAI,QAAQ;AACzD,UAAMA,UAAS,aAAa;AAAA,MAC1B,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF,CAAC;AACD,WAAO,kBAAkB;AAAA,MACvB,OAAOA,QAAO,UAAU,OAAO;AAAA,MAC/B,YAAY,CAAC,UAAU;AAAA,IACzB,CAAC;AAAA,EACH;AAEA,QAAM,SAAS,aAAa;AAAA,IAC1B,QAAQ;AAAA,IACR;AAAA,IACA;AAAA,IACA,OAAO,2BAA2B,EAAE,aAAa,SAAS,YAAY,CAAC;AAAA,EACzE,CAAC;AAID,SAAO,kBAAkB;AAAA,IACvB,OAAO,OAAO,UAAU,OAAO;AAAA,IAC/B,YAAY,CAAC,UAAU;AAAA,EACzB,CAAC;AACH;","names":["openai"]}

package/dist/providers/xai.d.ts

@@ -0,0 +1,33 @@
+/**
+ * xAI (Grok) OAuth Provider
+ *
+ * Uses OAuth tokens from AuthStorage to authenticate with the xAI API.
+ * The xAI API speaks an OpenAI-compatible chat format, and the OAuth access
+ * token is accepted as a bearer API key, so we plug `@ai-sdk/openai-compatible`
+ * into `https://api.x.ai/v1` with a custom fetch that injects the (auto-refreshed)
+ * access token.
+ */
+import type { MastraModelConfig } from '@mastra/core/llm';
+import { AuthStorage } from '../auth/storage.js';
+import type { CredentialStore } from '../auth/types.js';
+/** Get or create the shared AuthStorage instance. */
+export declare function getAuthStorage(): AuthStorage;
+/** Set a custom AuthStorage instance (useful for tests / TUI integration). */
+export declare function setAuthStorage(storage: AuthStorage | undefined): void;
+/**
+ * Build a fetch wrapper that authenticates with xAI OAuth.
+ * Injects the access token (auto-refreshed by AuthStorage) as a bearer token,
+ * preserving non-auth headers from the caller.
+ */
+export declare function buildXAIOAuthFetch(opts?: {
+    authStorage?: CredentialStore;
+}): typeof fetch;
+/**
+ * Creates an xAI model using OAuth authentication.
+ * Uses OAuth tokens from AuthStorage (auto-refreshes when needed).
+ */
+export declare function xaiProvider(modelId: string, options?: {
+    headers?: Record<string, string>;
+    authStorage?: CredentialStore;
+}): MastraModelConfig;
+//# sourceMappingURL=xai.d.ts.map

package/dist/providers/xai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xai.d.ts","sourceRoot":"","sources":["../../src/providers/xai.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAQxD,qDAAqD;AACrD,wBAAgB,cAAc,IAAI,WAAW,CAK5C;AAED,8EAA8E;AAC9E,wBAAgB,cAAc,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,IAAI,CAErE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,eAAe,CAAA;CAAO,GAAG,OAAO,KAAK,CAsC7F;AAED;;;GAGG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,WAAW,CAAC,EAAE,eAAe,CAAA;CAAE,GAC5E,iBAAiB,CASnB"}